Static task
static1
Behavioral task
behavioral1
Sample
e70a6993a13c6e12868de73ba3ceb5fb75764990684bb10bf5412724ae66a967.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e70a6993a13c6e12868de73ba3ceb5fb75764990684bb10bf5412724ae66a967.exe
Resource
win10v2004-20240426-en
General
-
Target
e70a6993a13c6e12868de73ba3ceb5fb75764990684bb10bf5412724ae66a967
-
Size
72KB
-
MD5
274b326f96fb934b1ad48ff83f0a559a
-
SHA1
6c8f4db07f445c7053dc2d6de53733e3758db324
-
SHA256
e70a6993a13c6e12868de73ba3ceb5fb75764990684bb10bf5412724ae66a967
-
SHA512
56c9bacdc105ab2663996a72773423608dbcb91ded9018fd0b16c65851f283a3d48116128770f9bb45ee1eb97f869e9bdf3696cbdc4f49dd76487dcb122e1e04
-
SSDEEP
768:ZrItKyw5WHXfQmjIiIk9ecAx7pP1EPU96MyXPdtldE9bIIIwjkRsss5:Zr3Z5IfQmv81x7pP1r3yXPdtnyj2sss5
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e70a6993a13c6e12868de73ba3ceb5fb75764990684bb10bf5412724ae66a967
Files
-
e70a6993a13c6e12868de73ba3ceb5fb75764990684bb10bf5412724ae66a967.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE