Static task
static1
Behavioral task
behavioral1
Sample
2e898aa1ac8d01b50115e89caed1f4c2594e4bdff46d7e7a5c782854b59481de.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
2e898aa1ac8d01b50115e89caed1f4c2594e4bdff46d7e7a5c782854b59481de.exe
Resource
win11-20240802-en
General
-
Target
2e898aa1ac8d01b50115e89caed1f4c2594e4bdff46d7e7a5c782854b59481de.exe
-
Size
1.6MB
-
MD5
13e1516a6ce71cecd6dd64df87c6082b
-
SHA1
18fac2904d8fef3afd35e9bf5476e93c3b8a05af
-
SHA256
2e898aa1ac8d01b50115e89caed1f4c2594e4bdff46d7e7a5c782854b59481de
-
SHA512
5aa67906a670d3d25bfaa6fa4b9b9de061706e704a56d972aaaff2bce5b179b862a3aba971d2d3662731351eefa4ec6da984e7257b81a6578af79db9cf363589
-
SSDEEP
49152:WEgnr3e7SmvlmdGWmDlOFtmrPKDoSCuEM2R:WEgr0SmvlmdzmDlOAOEM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e898aa1ac8d01b50115e89caed1f4c2594e4bdff46d7e7a5c782854b59481de.exe
Files
-
2e898aa1ac8d01b50115e89caed1f4c2594e4bdff46d7e7a5c782854b59481de.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ