Static task
static1
Behavioral task
behavioral1
Sample
e13ff8371479ec562aedb0e587bff6d0bf55b78d70568f8d934687fae50454df.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e13ff8371479ec562aedb0e587bff6d0bf55b78d70568f8d934687fae50454df.exe
Resource
win10v2004-20240419-en
General
-
Target
e13ff8371479ec562aedb0e587bff6d0bf55b78d70568f8d934687fae50454df.exe
-
Size
736KB
-
MD5
c9dbda15d8d46afd8e6cb17ba4dded7f
-
SHA1
4a89897bd0b0bbf2a08e7b6bb794add1739fac23
-
SHA256
e13ff8371479ec562aedb0e587bff6d0bf55b78d70568f8d934687fae50454df
-
SHA512
19f784ddcfa27bce55c77eb4fe9cf70322a8d9bad7e113a6d54d68685cdd5afc1d0fa1364c0b285e4c327f5887b0f732828ab909930ccb2ca9efc0be58487aaf
-
SSDEEP
12288:CWYIPXjxannnHg2z0lqwRC8yVXjAlFVsGRsIAnHdOtDDfMiozyOXzYe2/fCpG:CWYIPFannnHg2z0ZRCHXMoWnimOUeufD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e13ff8371479ec562aedb0e587bff6d0bf55b78d70568f8d934687fae50454df.exe
Files
-
e13ff8371479ec562aedb0e587bff6d0bf55b78d70568f8d934687fae50454df.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 726KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ