Static task
static1
Behavioral task
behavioral1
Sample
e40bd5dbbb3f66810fa5bac17f40c6b3466faa712754d6e521d261fef8d81f21.exe
Resource
win10v2004-20240412-en
General
-
Target
e40bd5dbbb3f66810fa5bac17f40c6b3466faa712754d6e521d261fef8d81f21
-
Size
2.3MB
-
MD5
700c04c284f48001a802596b50d5a149
-
SHA1
5e5eb49ef6d320e9c0fa7ba588a58f1503141714
-
SHA256
e40bd5dbbb3f66810fa5bac17f40c6b3466faa712754d6e521d261fef8d81f21
-
SHA512
eeffd81703cf0131fb107c9caf2a81d177e0c6f7bf812de2a4af9b77997226bc1ae57bd77a30eada10a46ab0c7336abb9ec033c7689c8e59c43fa834373d07fd
-
SSDEEP
49152:Ru5nhf8IKN3guiY95fLnWxRy4WP9CB1YYrKK6XJ7jKABcpB:EvsQuiQ5fyx44/tx65rM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e40bd5dbbb3f66810fa5bac17f40c6b3466faa712754d6e521d261fef8d81f21
Files
-
e40bd5dbbb3f66810fa5bac17f40c6b3466faa712754d6e521d261fef8d81f21.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 686KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qurhxoqw Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jyoiwlsz Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE