Static task
static1
Behavioral task
behavioral1
Sample
e73cab9a63e3425e4715957ae8c690e3822c8af4c361fdb6629e18c4d41116c4.exe
Resource
win7-20240708-en
General
-
Target
e73cab9a63e3425e4715957ae8c690e3822c8af4c361fdb6629e18c4d41116c4
-
Size
1.9MB
-
MD5
e6fc2ac20883cf92d791f28149e46ced
-
SHA1
60cc9d294c7638e296481b419daf334ebb6e5060
-
SHA256
e73cab9a63e3425e4715957ae8c690e3822c8af4c361fdb6629e18c4d41116c4
-
SHA512
4e35b9365c53494502b85e77722fdff13bb667239bf01bfc5f4681be85bcc5cbc4c70154a9f8a4f66c5c8a84d7af70f188571dedb7594438831993097b3f0694
-
SSDEEP
49152:IaiD4xLg3y36zkQmSp1KFhmBuvAK28gB/NjRXaiv6dLx+AuSRgYUfs0Ele:JisLce6zkY1zBmvYNVidLxDVe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e73cab9a63e3425e4715957ae8c690e3822c8af4c361fdb6629e18c4d41116c4
Files
-
e73cab9a63e3425e4715957ae8c690e3822c8af4c361fdb6629e18c4d41116c4.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nbwiuexy Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xgjbhlwy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE