Static task
static1
Behavioral task
behavioral1
Sample
ea5af8f40de93e2aca822f4dfee95160N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ea5af8f40de93e2aca822f4dfee95160N.exe
Resource
win10v2004-20240709-en
General
-
Target
ea5af8f40de93e2aca822f4dfee95160N.exe
-
Size
1.2MB
-
MD5
ea5af8f40de93e2aca822f4dfee95160
-
SHA1
2835d1b101817b2d11522a5d54f156a9044aec8b
-
SHA256
6115694ab20eadc88abdcf1f5daec33ea78d06bd30ddfac2f7d18b1cb8c1bdc7
-
SHA512
e178ce06446d651f191ce40f21a891460dc06e8c7568a40d0b0c117dc475060186b62ddf59ad6d20abc995959057d4b750ee5431523d3c402fdd34a4af7ee978
-
SSDEEP
24576:zOi8T1l4YLk1o2bPmwbGrFZ7p2Ydbf/FIunq+PJKX:EHs1PTma87Xxy5X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea5af8f40de93e2aca822f4dfee95160N.exe
Files
-
ea5af8f40de93e2aca822f4dfee95160N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ