Static task
static1
Behavioral task
behavioral1
Sample
e1b1283697a715c4503814487483090f5ec3462a3926340200ada9894a5145d8.exe
Resource
win7-20240611-en
General
-
Target
e1b1283697a715c4503814487483090f5ec3462a3926340200ada9894a5145d8
-
Size
192KB
-
MD5
ec953ec76ac11945eac9411f9a9e236f
-
SHA1
f07b89285cb1b6e5eb30dcd91e0bb15148d56299
-
SHA256
e1b1283697a715c4503814487483090f5ec3462a3926340200ada9894a5145d8
-
SHA512
e4fe63e4290a4d7a5d12aabe606e02989b707a725e6e0db069fd23c6aa4144300cefd5a8290c80cc664e072f3cae59927a8087a2e9e3e904e8f568b542578a28
-
SSDEEP
6144:a2B0AS6cap7O+7sQvMRlkM4RD/qzMfUVIO:a8FZBOqMRGM4h/qofbO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b1283697a715c4503814487483090f5ec3462a3926340200ada9894a5145d8
Files
-
e1b1283697a715c4503814487483090f5ec3462a3926340200ada9894a5145d8.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 18KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE