Static task
static1
Behavioral task
behavioral1
Sample
e0ece16177937a72af5678f92fa79d6a9fd01213b33663b46c6106aa3189eb96.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e0ece16177937a72af5678f92fa79d6a9fd01213b33663b46c6106aa3189eb96.exe
Resource
win10v2004-20240508-en
General
-
Target
e0ece16177937a72af5678f92fa79d6a9fd01213b33663b46c6106aa3189eb96
-
Size
371KB
-
MD5
2d3cfe702b5ed5064a086a7c63c9c853
-
SHA1
b74a924d93f66f0cf71023406a6959afe7a7c385
-
SHA256
e0ece16177937a72af5678f92fa79d6a9fd01213b33663b46c6106aa3189eb96
-
SHA512
cc45573b6c805763765b884d3ffa309bc4fd8f83508275a3323372d668afde693894aaa23840da52509054ca726a2ee1ec43fedab36fed9cb57437eaddf274e0
-
SSDEEP
6144:7IxY3q6emyxIeCc6LK+hRz9Fl7nNjknWlajhgVZfwJPH1Q+9fRQK1oErL:sxY66cMc6LL9v7uWrZfayYfRr1oK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e0ece16177937a72af5678f92fa79d6a9fd01213b33663b46c6106aa3189eb96
Files
-
e0ece16177937a72af5678f92fa79d6a9fd01213b33663b46c6106aa3189eb96.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ