Start
Static task
static1
Behavioral task
behavioral1
Sample
ea1f63a0084202fd38260d811a07cb2411a94ae0185eeee1b16ab3b588094c17.exe
Resource
win10v2004-20240412-en
General
-
Target
ea1f63a0084202fd38260d811a07cb2411a94ae0185eeee1b16ab3b588094c17
-
Size
2.1MB
-
MD5
94d6a65c8717548c356db75d8704325d
-
SHA1
a18873bc5bc87c67a2deeb6c7c7f67f73ee24d46
-
SHA256
ea1f63a0084202fd38260d811a07cb2411a94ae0185eeee1b16ab3b588094c17
-
SHA512
9e3049d5f149b8d33fcf596e61beb146b5a20622f9e90ae074c16d047a3334de970d11caf5f1109d859f3a3351583de4ef21c3544361e5c7b98bbaae7a7d0670
-
SSDEEP
49152:uSUl6vD5DxN6HHLJFw7a9lkT8Gb2928pS2CpzWUEgRd5RH:uSSwD5Dxke7CV29WLsd5F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea1f63a0084202fd38260d811a07cb2411a94ae0185eeee1b16ab3b588094c17
Files
-
ea1f63a0084202fd38260d811a07cb2411a94ae0185eeee1b16ab3b588094c17.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gzhligem Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vvevcrzk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE