Static task
static1
Behavioral task
behavioral1
Sample
e637a597b891ca2e5c29eaaeacd49693f6f1b91e242cd296a68e1bdcf1cc2340.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e637a597b891ca2e5c29eaaeacd49693f6f1b91e242cd296a68e1bdcf1cc2340.exe
Resource
win10v2004-20240426-en
General
-
Target
e637a597b891ca2e5c29eaaeacd49693f6f1b91e242cd296a68e1bdcf1cc2340
-
Size
7.5MB
-
MD5
a1121208c404fbb74658634126ff5b8b
-
SHA1
933026dc8e8c8c5d031d3ab45a1dd30d85a0babd
-
SHA256
e637a597b891ca2e5c29eaaeacd49693f6f1b91e242cd296a68e1bdcf1cc2340
-
SHA512
d997374f524685dfc74b3e1b5824fc2c48ea58ace0deb62f7c1059f46e30f85349202f38038213d63ccbd10f73d8b531fd0e3a5c5f63b737e72dda58c42ffb6a
-
SSDEEP
196608:vJ0KHdRdVMHmIyguS8hEl0fZ5b+NDn5NlyiFY3d0:vHVMPzls5iNEz3+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e637a597b891ca2e5c29eaaeacd49693f6f1b91e242cd296a68e1bdcf1cc2340
Files
-
e637a597b891ca2e5c29eaaeacd49693f6f1b91e242cd296a68e1bdcf1cc2340.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 808KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 52KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 80KB - Virtual size: 591KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ