Static task
static1
Behavioral task
behavioral1
Sample
e59e691927f4c905e4e644db650b6bb6a7ed84f7eeaa9577eb85479d43d250fb.exe
Resource
win7-20240221-en
General
-
Target
e59e691927f4c905e4e644db650b6bb6a7ed84f7eeaa9577eb85479d43d250fb
-
Size
65KB
-
MD5
1c59e322c59622d25b975fa132a8fb19
-
SHA1
2d7387ff3863fb77aeaf17653bf680fb35bfbb97
-
SHA256
e59e691927f4c905e4e644db650b6bb6a7ed84f7eeaa9577eb85479d43d250fb
-
SHA512
c6fe8b4dcc868f38540a0ce68b3d18efabbd259f41d6cbdd56a1a6cb34a0faa26a3d7863d1769a6b7c770dd528017955de57765da5178169fcf05c6f1e8232b7
-
SSDEEP
1536:LooEXqb28edToa+9cDOqj4zJZlv+PTzZiSruMnRttbVHi:qqb28eVoaDjOJvPvMnR5i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e59e691927f4c905e4e644db650b6bb6a7ed84f7eeaa9577eb85479d43d250fb
Files
-
e59e691927f4c905e4e644db650b6bb6a7ed84f7eeaa9577eb85479d43d250fb.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE