Static task
static1
Behavioral task
behavioral1
Sample
e9efe6634eb5bc7ad76465962aba01d389c2e6029617c6379f51de1f45d8607b.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e9efe6634eb5bc7ad76465962aba01d389c2e6029617c6379f51de1f45d8607b.exe
Resource
win10v2004-20240426-en
General
-
Target
e9efe6634eb5bc7ad76465962aba01d389c2e6029617c6379f51de1f45d8607b.exe
-
Size
6.0MB
-
MD5
9d3e1a6afad91ee5cc5212841a7f6830
-
SHA1
1777945b08dc73063242f0ab7f02517d9a892140
-
SHA256
e9efe6634eb5bc7ad76465962aba01d389c2e6029617c6379f51de1f45d8607b
-
SHA512
2a9fa5f6f5239807c778db758264455f2595df9afee2365222ac95e652c2a20106c88163ffbb35a3268ab5e990518990a901a254ff83d3b19e8873af2f88883b
-
SSDEEP
49152:W0hpWn7fRmexodfQxrzojiFvHFSqasscWLpRei/vwj:W8ErxhEiFXsZp0Ov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9efe6634eb5bc7ad76465962aba01d389c2e6029617c6379f51de1f45d8607b.exe
Files
-
e9efe6634eb5bc7ad76465962aba01d389c2e6029617c6379f51de1f45d8607b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ