Static task
static1
Behavioral task
behavioral1
Sample
e87ff3229244a9f682fe54783b5374b04053db9f9d6f783d05cb313d2897bc9c.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e87ff3229244a9f682fe54783b5374b04053db9f9d6f783d05cb313d2897bc9c.exe
Resource
win10v2004-20240508-en
General
-
Target
e87ff3229244a9f682fe54783b5374b04053db9f9d6f783d05cb313d2897bc9c
-
Size
64KB
-
MD5
61356d4a82e5dcf92a07d6c28c4b26e6
-
SHA1
74b403352c56db0599d1b86665cfedabbbc4872d
-
SHA256
e87ff3229244a9f682fe54783b5374b04053db9f9d6f783d05cb313d2897bc9c
-
SHA512
b91dab0bfa4c1e360d3f7183e2a01c6a5fdaa5e89feb051ee6244328716b4e64e8b42f92fa2cb5e8ca0982daca5311d35dcd420d0a3d592f89bbbddfaa76e2f4
-
SSDEEP
1536:o6LtJrsNIaTvOwmtTE9ier8fEj3r3EKfbpWV1iL+iALMH6:o6LtJwIIvOXoiYQHeWV1iL+9Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e87ff3229244a9f682fe54783b5374b04053db9f9d6f783d05cb313d2897bc9c
Files
-
e87ff3229244a9f682fe54783b5374b04053db9f9d6f783d05cb313d2897bc9c.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ