Static task
static1
Behavioral task
behavioral1
Sample
e91e49ded9160e8595f80d7cd2c0070002cdec664cc6f180a4c19a85e52db358.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e91e49ded9160e8595f80d7cd2c0070002cdec664cc6f180a4c19a85e52db358.exe
Resource
win10v2004-20240412-en
General
-
Target
e91e49ded9160e8595f80d7cd2c0070002cdec664cc6f180a4c19a85e52db358
-
Size
358KB
-
MD5
a44816bf4664e02398e73cbc7bfdc446
-
SHA1
4a533181fc3abb2df76d50370c49af825143f020
-
SHA256
e91e49ded9160e8595f80d7cd2c0070002cdec664cc6f180a4c19a85e52db358
-
SHA512
301108cb0a3f573b0501a656ba4230e267d0016ab0ce70698ba171a34b1e23be57702c24fb312136e01f7d7417d2a93e679fd2ebbe7b28b2945cce83c5b2a35d
-
SSDEEP
6144:yVfjmNnxaz+xTxVtgshXfMPmlzAibjFWDEugmq:M7+wy7VtgshvM6LbjkDEuxq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e91e49ded9160e8595f80d7cd2c0070002cdec664cc6f180a4c19a85e52db358
Files
-
e91e49ded9160e8595f80d7cd2c0070002cdec664cc6f180a4c19a85e52db358.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE