Static task
static1
Behavioral task
behavioral1
Sample
e1450b772ec46eccd70804860e74af36682fbb186d13a374d4d8b516077e0386.exe
Resource
win7-20240221-en
General
-
Target
e1450b772ec46eccd70804860e74af36682fbb186d13a374d4d8b516077e0386
-
Size
123KB
-
MD5
442e101c335efccca65ac0bc8c6118d9
-
SHA1
470c5812bf7a35bae38a2bcc90beae84b0d15128
-
SHA256
e1450b772ec46eccd70804860e74af36682fbb186d13a374d4d8b516077e0386
-
SHA512
f4b2baf70d90551d43ee1acc67cb7125ed6ed4ef42f251afd1791b51238714358bb9a25235ce8418c106c6ada86da8a3f990f60def66c73069ef2f0f2683a400
-
SSDEEP
3072:rLaY46tGNtty1//xkurCTnSOfXJbql31aGMY5MP:x46tGdy1//uTZMZ1FdMP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1450b772ec46eccd70804860e74af36682fbb186d13a374d4d8b516077e0386 -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
e1450b772ec46eccd70804860e74af36682fbb186d13a374d4d8b516077e0386.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE