Static task
static1
Behavioral task
behavioral1
Sample
e9942964b93c46bae166f8454229d10cae34ed97f903a1f0828412c1d13ff9fb.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e9942964b93c46bae166f8454229d10cae34ed97f903a1f0828412c1d13ff9fb.exe
Resource
win10v2004-20240802-en
General
-
Target
e9942964b93c46bae166f8454229d10cae34ed97f903a1f0828412c1d13ff9fb
-
Size
192KB
-
MD5
2cf084bc2ad76c525f2f8e7e05486790
-
SHA1
2903c3f58f4b1271a4fadc9c201d94df15d06a12
-
SHA256
e9942964b93c46bae166f8454229d10cae34ed97f903a1f0828412c1d13ff9fb
-
SHA512
c8cae028e3e92f9d556b20e8c78404e7ee60a5e6d48bb24c47af7333c96cb95060cfe697e56a38cbeb25fff8d98c923c9cae4663876542db5d9622ead33f6fd5
-
SSDEEP
3072:HRD8RxBEJAMs4Pv//XBse3Ey032yaCMMq9FIUPv9XOVw1FaX6lwzmOJfYerMMq9k:HKfBMbXXR3E4f9FIUpOVw86CmOJfTo9k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9942964b93c46bae166f8454229d10cae34ed97f903a1f0828412c1d13ff9fb
Files
-
e9942964b93c46bae166f8454229d10cae34ed97f903a1f0828412c1d13ff9fb.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ