Static task
static1
Behavioral task
behavioral1
Sample
e2bb00ad68d4333ea37315e45a8e2f29ed109c409d1d2b209d7e9d55681ad936.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e2bb00ad68d4333ea37315e45a8e2f29ed109c409d1d2b209d7e9d55681ad936.exe
Resource
win10v2004-20240802-en
General
-
Target
e2bb00ad68d4333ea37315e45a8e2f29ed109c409d1d2b209d7e9d55681ad936.exe
-
Size
1.6MB
-
MD5
5e49a35f93b76fd58e346ceee4cd8c5b
-
SHA1
8e51de5372465a388f84335b92babb05e1acda60
-
SHA256
e2bb00ad68d4333ea37315e45a8e2f29ed109c409d1d2b209d7e9d55681ad936
-
SHA512
1845c6dd9fde04d0bf7bc008634a41de233f9650a8f1ec46f15538b6f103e387f2bd4c3583a148505f2faa3cd540f03a5ee5cfddb563650bc63626ad5d26cff8
-
SSDEEP
49152:R/4mx3f8GKDRGiHp0gBC/KbGEEk9f1hl/Zg2451Y+d:tl3fSlGiHp0go/YV/fb/D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2bb00ad68d4333ea37315e45a8e2f29ed109c409d1d2b209d7e9d55681ad936.exe
Files
-
e2bb00ad68d4333ea37315e45a8e2f29ed109c409d1d2b209d7e9d55681ad936.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ