Static task
static1
Behavioral task
behavioral1
Sample
e5185a42b18b1d30e34d579cec72cc2ce33a90a049432b88ce39372b7d49e2f9.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
e5185a42b18b1d30e34d579cec72cc2ce33a90a049432b88ce39372b7d49e2f9.exe
Resource
win10v2004-20240226-en
General
-
Target
e5185a42b18b1d30e34d579cec72cc2ce33a90a049432b88ce39372b7d49e2f9
-
Size
95KB
-
MD5
2b0cc07f335e306b5c92c3abf011579f
-
SHA1
13b596c81e087abf59090414af4a7b4ec70b0b2a
-
SHA256
e5185a42b18b1d30e34d579cec72cc2ce33a90a049432b88ce39372b7d49e2f9
-
SHA512
b2145360f49b4cb3e132fffd2e40c67805f2c531387e2d4ba046552ef065db777b4cf647b635fe3c2a8b05b83a358dc932e7be7872c66c2a55f9fb89629b71bb
-
SSDEEP
1536:ODGvwWvDewdRWIb/QgFvVinNU6/OPSoiRQrGWRVRoRch1dROrwpOudRirVtFsrTO:OCIWvD38IrQgenNdMSoieXTWM1dQrTOE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5185a42b18b1d30e34d579cec72cc2ce33a90a049432b88ce39372b7d49e2f9
Files
-
e5185a42b18b1d30e34d579cec72cc2ce33a90a049432b88ce39372b7d49e2f9.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ