Static task
static1
Behavioral task
behavioral1
Sample
e0b49812034d96ca8d138c239f1fd06cd48d23df60310c2ea452ac8b1d7d5615.exe
Resource
win7-20240708-en
General
-
Target
e0b49812034d96ca8d138c239f1fd06cd48d23df60310c2ea452ac8b1d7d5615.exe
-
Size
1.9MB
-
MD5
8ffb65cb8168d0c867a26684ecec93ef
-
SHA1
02555a52209c4ae4b6b555729d64e99fe5b66ceb
-
SHA256
e0b49812034d96ca8d138c239f1fd06cd48d23df60310c2ea452ac8b1d7d5615
-
SHA512
d04fb22cc30ccea2a1888306e44084b20e7d5042f548b96c3508f222f02024e9cc139b3a9c29432e600ad5a895e87495f5586954d64c88796853d9bc0f459336
-
SSDEEP
49152:+gU2w+vkcWCC+ryk9W3MsvSS/C8Lj8a2s9J9k2WoxyBGWp00gZn6:hvkcJ9W3Ms6SrY4kOH0Y6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0b49812034d96ca8d138c239f1fd06cd48d23df60310c2ea452ac8b1d7d5615.exe
Files
-
e0b49812034d96ca8d138c239f1fd06cd48d23df60310c2ea452ac8b1d7d5615.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fswqovdv Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
izwavfei Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE