Static task
static1
Behavioral task
behavioral1
Sample
ea00173fff7e31db911f40e6f10efa20N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea00173fff7e31db911f40e6f10efa20N.exe
Resource
win10v2004-20240802-en
General
-
Target
ea00173fff7e31db911f40e6f10efa20N.exe
-
Size
96KB
-
MD5
ea00173fff7e31db911f40e6f10efa20
-
SHA1
e536ee805bc6378a6902df84d62e842e914e9943
-
SHA256
180a658aca069cbdf6a8b2bf16a8491527c5e7ee499fcf7c46f355c899db0481
-
SHA512
2aaf0e9da36260f9118132d8d460d6166195aa3c981bb258a29c950a584863a4b3b2f43e4a7f4c1fb44d712a829794487376ee9fc364d2b51e1d8b66967a4b84
-
SSDEEP
1536:CkotIhdRdwix9ApwoMbUi52sfEX5OrL2tmo74S7V+5pUMv84WMRw8Dkqq:MtADEwlbx5BEX5CLi94Sp+7H7wWkqq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea00173fff7e31db911f40e6f10efa20N.exe
Files
-
ea00173fff7e31db911f40e6f10efa20N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ