Static task
static1
Behavioral task
behavioral1
Sample
e636439ed339d243d8d4d66158bc7b67a5063b4e2f0e237bced02e2433172dfa.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e636439ed339d243d8d4d66158bc7b67a5063b4e2f0e237bced02e2433172dfa.exe
Resource
win10v2004-20240508-en
General
-
Target
e636439ed339d243d8d4d66158bc7b67a5063b4e2f0e237bced02e2433172dfa
-
Size
14KB
-
MD5
c92b344aa5ee6597f913ed4a516e8d60
-
SHA1
bc1991ecaf5ab674aab98c5f84eabd108832a165
-
SHA256
e636439ed339d243d8d4d66158bc7b67a5063b4e2f0e237bced02e2433172dfa
-
SHA512
4de847af3e98f4fda6c7d0596850928c27f37a8e96c1f01c22bbcf65161f42cc0f8fc5946b486ee38aa52f2d825230d4e9663348327cf433a4a7fde13724af08
-
SSDEEP
384:+w0dNk+g7+o9Wr1aBucuobE+h4SDE045He:+wSwl9BDuvY4IA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e636439ed339d243d8d4d66158bc7b67a5063b4e2f0e237bced02e2433172dfa
Files
-
e636439ed339d243d8d4d66158bc7b67a5063b4e2f0e237bced02e2433172dfa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ