Static task
static1
Behavioral task
behavioral1
Sample
e5bdf42e4e79eb981f9db9eddf6877925639cf148ff7c218c29cd3b6bd8f7591.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
e5bdf42e4e79eb981f9db9eddf6877925639cf148ff7c218c29cd3b6bd8f7591.exe
Resource
win10v2004-20240709-en
General
-
Target
e5bdf42e4e79eb981f9db9eddf6877925639cf148ff7c218c29cd3b6bd8f7591
-
Size
468KB
-
MD5
6976760ec19019de304ef043b26bfe2e
-
SHA1
f0e2d6e50db3110bf2dd20560b22837753732214
-
SHA256
e5bdf42e4e79eb981f9db9eddf6877925639cf148ff7c218c29cd3b6bd8f7591
-
SHA512
a86922bbf84026679b3282e755af697a8f84cc06f49444be5d128d1cd0731b1acc2ee31963c5eb54939f65b98dea24eddb026b83023d7e49535c386239ba0b82
-
SSDEEP
3072:VbA5oBIdl05Ut6YqP0NjffB/hd+FompDn0HexVEXF7o3+eBIFylm:Vb+oW8UtCPojffvmvyF72hBIF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5bdf42e4e79eb981f9db9eddf6877925639cf148ff7c218c29cd3b6bd8f7591
Files
-
e5bdf42e4e79eb981f9db9eddf6877925639cf148ff7c218c29cd3b6bd8f7591.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ