Static task
static1
Behavioral task
behavioral1
Sample
e4a1e7be7eafe4f5c1dfbe0d1d15d29ed97ed70169d48ef43ede4bb2d8cd167b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e4a1e7be7eafe4f5c1dfbe0d1d15d29ed97ed70169d48ef43ede4bb2d8cd167b.exe
Resource
win10v2004-20240419-en
General
-
Target
e4a1e7be7eafe4f5c1dfbe0d1d15d29ed97ed70169d48ef43ede4bb2d8cd167b
-
Size
25KB
-
MD5
2eede71e02f3595b70b5729525ed166f
-
SHA1
27e705fffc5e9b06e0b5084738b73822b83da304
-
SHA256
e4a1e7be7eafe4f5c1dfbe0d1d15d29ed97ed70169d48ef43ede4bb2d8cd167b
-
SHA512
d1fd87d629e7b090d30f79f6592d759d331f2cd1bd0550f70f01e73291ca344c469e43c09f686296065ac055c724241b3e7b782ca27a3528275b999ced62ef38
-
SSDEEP
384:sWeYqcLVKuIadbjVwrLhYBMHwhYOpreAaE6CBG0x/P3S+:neYqcLkUPGLhPHfVOvBNp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4a1e7be7eafe4f5c1dfbe0d1d15d29ed97ed70169d48ef43ede4bb2d8cd167b
Files
-
e4a1e7be7eafe4f5c1dfbe0d1d15d29ed97ed70169d48ef43ede4bb2d8cd167b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE