Static task
static1
Behavioral task
behavioral1
Sample
e871b7542549fa89c885b50db1b634b7a55c2bf7cd82a0f5068596f949cd4903.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e871b7542549fa89c885b50db1b634b7a55c2bf7cd82a0f5068596f949cd4903.exe
Resource
win10v2004-20240802-en
General
-
Target
e871b7542549fa89c885b50db1b634b7a55c2bf7cd82a0f5068596f949cd4903
-
Size
3.0MB
-
MD5
b924033b12b399f28151ae32ac58d859
-
SHA1
73b13515f9a2bb9ad52eb4b11039d47ef3786e21
-
SHA256
e871b7542549fa89c885b50db1b634b7a55c2bf7cd82a0f5068596f949cd4903
-
SHA512
531f36798b4b532516037c6626cf7c9ecdf07ee8aadbc4b2ce01eb4614ad4f40d05da09864c6a57151e1664cdb107e7af3b47496888f3fe5fa4d72448f1aa5cb
-
SSDEEP
49152:El2t1k9bchDBHc1dQZad9SDrLPpCXIUVpSUUxQOQft6flCslWQXownwRi7Qr19Zc:v1UbmBHc1d0adgDr5upIxQOm68slWQwe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e871b7542549fa89c885b50db1b634b7a55c2bf7cd82a0f5068596f949cd4903
Files
-
e871b7542549fa89c885b50db1b634b7a55c2bf7cd82a0f5068596f949cd4903.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ