Static task
static1
Behavioral task
behavioral1
Sample
e1a7994ddfd57c0e0e5640720bab427afa0d0ca11f5b09d50b4fe8c9d030c726.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e1a7994ddfd57c0e0e5640720bab427afa0d0ca11f5b09d50b4fe8c9d030c726.exe
Resource
win10v2004-20240412-en
General
-
Target
e1a7994ddfd57c0e0e5640720bab427afa0d0ca11f5b09d50b4fe8c9d030c726.exe
-
Size
346KB
-
MD5
d6ef5b4c4627dc06ababa7f1276edc79
-
SHA1
ad9e36b336501512587f2796b602c133bb4dde3c
-
SHA256
e1a7994ddfd57c0e0e5640720bab427afa0d0ca11f5b09d50b4fe8c9d030c726
-
SHA512
3edd84fc850f375689ad16ed35db1c464d6658071ee1973f650382c745219d008198e0e94dc60871098f96ce9935b21979381eb789e88def3f6295165131c48d
-
SSDEEP
6144:nwdiUkUG5/Ob/HfQglA3+6fQ2pqlI9B7ReR7BDQ9TxK/yTf6qe1CzW8:8HkUG5/OjblY+oFql6B7RUQ9dK/yTf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1a7994ddfd57c0e0e5640720bab427afa0d0ca11f5b09d50b4fe8c9d030c726.exe
Files
-
e1a7994ddfd57c0e0e5640720bab427afa0d0ca11f5b09d50b4fe8c9d030c726.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 339KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ