Static task
static1
Behavioral task
behavioral1
Sample
e40e78c788dbe813230c0f3f4878e8b0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e40e78c788dbe813230c0f3f4878e8b0N.exe
Resource
win10v2004-20240802-en
General
-
Target
e40e78c788dbe813230c0f3f4878e8b0N.exe
-
Size
664KB
-
MD5
e40e78c788dbe813230c0f3f4878e8b0
-
SHA1
615ee6da9d947a8d3e69daaf6c83106c9e1b0a7c
-
SHA256
6e1cb81f47e61cee994fe61f599dec783f04cae7e2a50a19bc249d82f7565256
-
SHA512
bbf0531b0b4449ec22fe89607af3b884fee0670a5ba59bdc3ffcd9c36ee86bc03699262b03b89fd94aa61700ffac4372c55d5a4bf4502fed4bc03cf11a404125
-
SSDEEP
12288:n2aANZU/pV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDk:o32W4XWleKWNUir2MhNl6zX3w9As/xOX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e40e78c788dbe813230c0f3f4878e8b0N.exe
Files
-
e40e78c788dbe813230c0f3f4878e8b0N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ