Static task
static1
Behavioral task
behavioral1
Sample
e94ba0af4a8249c72fd1965b4d51f17ac444b24ddecf67567e3028036f278d96.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e94ba0af4a8249c72fd1965b4d51f17ac444b24ddecf67567e3028036f278d96.exe
Resource
win10v2004-20240419-en
General
-
Target
e94ba0af4a8249c72fd1965b4d51f17ac444b24ddecf67567e3028036f278d96
-
Size
14KB
-
MD5
28d7c4038ce641be322236d996ee907f
-
SHA1
a4b9aa5a65c4c69cd0197ae041b85b1cbac9c435
-
SHA256
e94ba0af4a8249c72fd1965b4d51f17ac444b24ddecf67567e3028036f278d96
-
SHA512
6a29f5a4ec2d8ee9841ebf4ffef58f70ed8d7993717af690aef94a3937363de051d2636a6c4af83b2335e022000f54c1244de0d15b7e5f492c7658fc266bb3f2
-
SSDEEP
384:JrFTWpLPS5f+gkKkUNnFFdILmIWsuDE045HOiii:JrFWZy+/KRGLEAciii
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e94ba0af4a8249c72fd1965b4d51f17ac444b24ddecf67567e3028036f278d96
Files
-
e94ba0af4a8249c72fd1965b4d51f17ac444b24ddecf67567e3028036f278d96.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ