Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_56adeeae914bf93e695830f55a243ab1_espilon-red.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-15_56adeeae914bf93e695830f55a243ab1_espilon-red.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-15_56adeeae914bf93e695830f55a243ab1_espilon-red
-
Size
4.8MB
-
MD5
56adeeae914bf93e695830f55a243ab1
-
SHA1
73ee7d2b06faff75d20152770ca119f52266397a
-
SHA256
5fd9fadaae598a3906c7392678a2ab826376637753ce5d37a9e4d40e3ea77bdf
-
SHA512
737f2686542bf6ad1c519981be738df38d71c42ece3be8c393080ee948ceff8a63c5700f3a65c53b939560ed9681f9ed681c24ddb1fc1e35ee0826241146724a
-
SSDEEP
98304:loSOJgSJrp9ewQnm77LT7Qdz/lrH6F3eGvJaf5zBjxjlxJ:lovJgSJrpJQm77LT7Qdz/lbw0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-15_56adeeae914bf93e695830f55a243ab1_espilon-red
Files
-
2024-04-15_56adeeae914bf93e695830f55a243ab1_espilon-red.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 315KB - Virtual size: 630KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 281B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 628KB - Virtual size: 628KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/32 Size: 126KB - Virtual size: 126KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/46 Size: 512B - Virtual size: 64B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/65 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/78 Size: 598KB - Virtual size: 598KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/90 Size: 207KB - Virtual size: 207KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 589KB - Virtual size: 588KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ