Static task
static1
Behavioral task
behavioral1
Sample
e1b150125d4bc8908c4a8440dea17942c68881827716cd028315e0496210dec2.exe
Resource
win10v2004-20240412-en
General
-
Target
e1b150125d4bc8908c4a8440dea17942c68881827716cd028315e0496210dec2
-
Size
2.3MB
-
MD5
07d63d32d8b2ff0220d5bcc0c5c8d095
-
SHA1
6829e8121604e219f56b90028287c278ab9b984f
-
SHA256
e1b150125d4bc8908c4a8440dea17942c68881827716cd028315e0496210dec2
-
SHA512
7328c8b30078247602536c1fe41fff0eea4a822083285ef920bcfa57cd219770eabf3005361cae9e1fcf3f6a5f3b95c12b9d06db291a519c5f82e1277c7c0b2f
-
SSDEEP
49152:Cg69SebPPiKgYyC5N03uQ2me6j1KfvDhnf3lQ8wXAVJz6SWcGX:Cg69Sebi+0332SjwHNf9w0+5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b150125d4bc8908c4a8440dea17942c68881827716cd028315e0496210dec2
Files
-
e1b150125d4bc8908c4a8440dea17942c68881827716cd028315e0496210dec2.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gtjagdlm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xftcnlgz Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE