Static task
static1
Behavioral task
behavioral1
Sample
e0581b57a7e87e38a5a0ebf8861f816a415bdcb037111f32ba4bdbdc78ca9be3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0581b57a7e87e38a5a0ebf8861f816a415bdcb037111f32ba4bdbdc78ca9be3.exe
Resource
win10v2004-20240419-en
General
-
Target
e0581b57a7e87e38a5a0ebf8861f816a415bdcb037111f32ba4bdbdc78ca9be3.exe
-
Size
659KB
-
MD5
d486bb0e00d7058f5f03c1a51163fe95
-
SHA1
5c592c9f14bcbaec81b07d9f149a9f1e0b9b1859
-
SHA256
e0581b57a7e87e38a5a0ebf8861f816a415bdcb037111f32ba4bdbdc78ca9be3
-
SHA512
d192ac15f9b13f8434316e5f6f3d2d487d75daad8b05d0f79faba619eec4209a27f5c6120ce58e4137dd1e9fb2ffe03e0825c96ab963476a1dff7f4a5b2f579e
-
SSDEEP
12288:FrmB778QzrSmyxk3CFAEFaNWyN4rfs9xBYGp1TbFs1SoyDveri69rJiTrJyY20m:JmBlSmyCy7FcWtrEZY01nUyDvGiJyj0m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0581b57a7e87e38a5a0ebf8861f816a415bdcb037111f32ba4bdbdc78ca9be3.exe
Files
-
e0581b57a7e87e38a5a0ebf8861f816a415bdcb037111f32ba4bdbdc78ca9be3.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 654KB - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ