Static task
static1
Behavioral task
behavioral1
Sample
e9cb21f2711ab74cfa9300ef2636dbf335297533ecb4dcd87db44c1717113a70.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
e9cb21f2711ab74cfa9300ef2636dbf335297533ecb4dcd87db44c1717113a70.exe
Resource
win10v2004-20240508-en
General
-
Target
e9cb21f2711ab74cfa9300ef2636dbf335297533ecb4dcd87db44c1717113a70
-
Size
96KB
-
MD5
3adb5ce0a50a8a626c9db534b715d413
-
SHA1
e928211d89a31f14953dc03dcc58ec05beb7dd29
-
SHA256
e9cb21f2711ab74cfa9300ef2636dbf335297533ecb4dcd87db44c1717113a70
-
SHA512
f9c9b5f02b2c168d3a57a51f80d0baa91d1bb67121f75b0491e252f04981678e01a6d97bd10d6b9895b1f298abdaf7e9010aee574ac123541ed21b37c5c24157
-
SSDEEP
1536:A9nBpLM2rOEOOnC8N+OMcJrKizU6lHbUDnBcoKpf1bVOJyE3ccsl4git/BOmPCMl:A9nBpL/rOEXC8N+Of9zU6RbU7BcoKxZm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9cb21f2711ab74cfa9300ef2636dbf335297533ecb4dcd87db44c1717113a70
Files
-
e9cb21f2711ab74cfa9300ef2636dbf335297533ecb4dcd87db44c1717113a70.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ