Static task
static1
Behavioral task
behavioral1
Sample
e542d6b54af9a3e4765e8f018e5380f44a967b1e199b98d5df1868ee295691b6.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e542d6b54af9a3e4765e8f018e5380f44a967b1e199b98d5df1868ee295691b6.exe
Resource
win10v2004-20240802-en
General
-
Target
e542d6b54af9a3e4765e8f018e5380f44a967b1e199b98d5df1868ee295691b6
-
Size
5.7MB
-
MD5
0b4d68bbd4892720d1c9fbc635f4a46b
-
SHA1
5fd8e917f2fedd4cdab619621a0e02a07a26ae72
-
SHA256
e542d6b54af9a3e4765e8f018e5380f44a967b1e199b98d5df1868ee295691b6
-
SHA512
c6deca7ecaae4735ae082b79d7218223c69987184dae4ede7f1ef3782f39a1c94add94b8de62f1b4adc7e0fbcbb75cd848dd63444b3bf67719d6859711e8d854
-
SSDEEP
49152:7Pv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBJ:TKUgTH2M2m9UMpu1QfLczqssnKSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e542d6b54af9a3e4765e8f018e5380f44a967b1e199b98d5df1868ee295691b6
Files
-
e542d6b54af9a3e4765e8f018e5380f44a967b1e199b98d5df1868ee295691b6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE