Static task
static1
Behavioral task
behavioral1
Sample
e795e06d81c4954723d10cd5affff6a4947b55caad62033fe829ed72aec6dd82.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e795e06d81c4954723d10cd5affff6a4947b55caad62033fe829ed72aec6dd82.exe
Resource
win10v2004-20240508-en
General
-
Target
e795e06d81c4954723d10cd5affff6a4947b55caad62033fe829ed72aec6dd82.exe
-
Size
674KB
-
MD5
45645bca6e28a5514d4f3a38ca852619
-
SHA1
4367be00ac12f7dbd3572e3fd57aa84d46f45e58
-
SHA256
e795e06d81c4954723d10cd5affff6a4947b55caad62033fe829ed72aec6dd82
-
SHA512
e6e1dbeb6f8f08610a94c70b15bfeae9b8d995255219a2428fa4f7a74879eb49b31decd9eb28f8c6e7662bf4f92e07e270fda9874ceb468af21496c15c01ed62
-
SSDEEP
12288:OKcpV/xdgO6OJvc7GRdz7QJFjlv70eSUNA7dodqaOeLJW3:bO6D7gz7S7zNBcaOSW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e795e06d81c4954723d10cd5affff6a4947b55caad62033fe829ed72aec6dd82.exe
Files
-
e795e06d81c4954723d10cd5affff6a4947b55caad62033fe829ed72aec6dd82.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 664KB - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ