Static task
static1
Behavioral task
behavioral1
Sample
e0ebabdc0d66ee227f18d362ca5bd492d549aa90e28d480e6cc8383609fc2a24N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0ebabdc0d66ee227f18d362ca5bd492d549aa90e28d480e6cc8383609fc2a24N.exe
Resource
win10v2004-20240910-en
General
-
Target
e0ebabdc0d66ee227f18d362ca5bd492d549aa90e28d480e6cc8383609fc2a24N.exe
-
Size
80KB
-
MD5
e9128caa8af3e84fd663c4a17dd4afe0
-
SHA1
8ba22b051f0a690c8d7f06a9917be0923b24dcdc
-
SHA256
e0ebabdc0d66ee227f18d362ca5bd492d549aa90e28d480e6cc8383609fc2a24
-
SHA512
0067eee149886e24035fd87b571960692e60f24751a3877cc0a3562dc255d7b624b985a42f566e0c056ed9e9b4999644991146177cf4f544df556ffcf4cf0d10
-
SSDEEP
1536:vH4SeOxIUrSn5BxyyyyWyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyynAF:vH/I2CBWy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0ebabdc0d66ee227f18d362ca5bd492d549aa90e28d480e6cc8383609fc2a24N.exe
Files
-
e0ebabdc0d66ee227f18d362ca5bd492d549aa90e28d480e6cc8383609fc2a24N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iata1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iata2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iata3 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iata4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iata5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iata6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iata7 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 746B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ