Static task
static1
Behavioral task
behavioral1
Sample
5eea1e1b06214a8ec3d0b0e94f9e1640N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5eea1e1b06214a8ec3d0b0e94f9e1640N.exe
Resource
win10v2004-20240709-en
General
-
Target
5eea1e1b06214a8ec3d0b0e94f9e1640N.exe
-
Size
31KB
-
MD5
5eea1e1b06214a8ec3d0b0e94f9e1640
-
SHA1
f62a1d9ea86e2b8f1c4c4453565c4756815b6ebb
-
SHA256
d36941435d2f8fef4a7a137f7efd96283572431fbe323850986b499e99dbaa52
-
SHA512
0dc6887cb477c43fcf7bddd774244d27010b02f8273d82f911fa8c8f18ad0a9dc331b7ad89a20b09f388a24f95123cc8a532477f53d08fec1244aecbdb035a1b
-
SSDEEP
768:7JpMcU2hW/IzV/K7m/41b0HnuaN7Dq5zpywAir:bMcU28wzV/KKg1b8u9zpw2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5eea1e1b06214a8ec3d0b0e94f9e1640N.exe
Files
-
5eea1e1b06214a8ec3d0b0e94f9e1640N.exe.exe windows:5 windows x86 arch:x86
0782c9fdd7089bfa1ad7456fcd548e92
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
gdi32
TextOutW
user32
EndPaint
Sections
.MPRESS1 Size: 21KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE