Static task
static1
Behavioral task
behavioral1
Sample
e36f8062c48bf99ab55f779df2e9d200N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e36f8062c48bf99ab55f779df2e9d200N.exe
Resource
win10v2004-20240709-en
General
-
Target
e36f8062c48bf99ab55f779df2e9d200N.exe
-
Size
1.9MB
-
MD5
e36f8062c48bf99ab55f779df2e9d200
-
SHA1
949fc8bf1fe67c7f3e55187f3622c18f99c391c5
-
SHA256
5cc80b17d499c15226748ab44f5e1fa6a655b813a68ed71dede14ba7d921d056
-
SHA512
7221ae8f1b7cf9ce9c31168c3578d719dbff3eb83f0141c34cc9a8e3951f944993a0af791a42d8e40347618d6fedfc018c13f5afd25f6e66a8742d3bf1d3030a
-
SSDEEP
49152:hy3JVnPi5dbVfy+/K++/lJgLSyAfPJeFhEFGTka:E5VnPEHd/SgeyMJeFhE6ka
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e36f8062c48bf99ab55f779df2e9d200N.exe
Files
-
e36f8062c48bf99ab55f779df2e9d200N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE