Static task
static1
Behavioral task
behavioral1
Sample
e672a91a2f0bd50585c226d5bfce95f8d2ed6f156553749a24dd1c99d5cc4b44.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e672a91a2f0bd50585c226d5bfce95f8d2ed6f156553749a24dd1c99d5cc4b44.exe
Resource
win10v2004-20231215-en
General
-
Target
e672a91a2f0bd50585c226d5bfce95f8d2ed6f156553749a24dd1c99d5cc4b44
-
Size
383KB
-
MD5
3d6d47cf488fced9b13d0889604918c9
-
SHA1
802371554c79d09666912300d4f4933868912e04
-
SHA256
e672a91a2f0bd50585c226d5bfce95f8d2ed6f156553749a24dd1c99d5cc4b44
-
SHA512
9b00e40c31f5ff7d7ab0e26d5366125da7f3a9724f1617fe830ce009b3dcd8efd666feec1fd5beb39170b4832d3f89e903e41528e9a18017646329cfe11d939d
-
SSDEEP
384:n+eLERjIrkpzNDmRjtyKgrT9HAXf80XAxhtUYvR6aI42EfzrP5NfXi5YVSWG2pCJ:+eLka0zdm/QX9pvRYL/lbU0jbsUL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e672a91a2f0bd50585c226d5bfce95f8d2ed6f156553749a24dd1c99d5cc4b44
Files
-
e672a91a2f0bd50585c226d5bfce95f8d2ed6f156553749a24dd1c99d5cc4b44.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ