Static task
static1
Behavioral task
behavioral1
Sample
e6b0acfb008898e750b5feb8b75a66de80d127723091d1084c0677994d5590eb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e6b0acfb008898e750b5feb8b75a66de80d127723091d1084c0677994d5590eb.exe
Resource
win10v2004-20240802-en
General
-
Target
e6b0acfb008898e750b5feb8b75a66de80d127723091d1084c0677994d5590eb
-
Size
57KB
-
MD5
b5d7c07f09407f7d2554307a10a7ddef
-
SHA1
0479a4570653bd1ebdcb37845121f3fbae6424be
-
SHA256
e6b0acfb008898e750b5feb8b75a66de80d127723091d1084c0677994d5590eb
-
SHA512
1ab555275a8e68f3f1e0f0fba987a1f99b344cd1a04d1348a337994ed48ae67bf41e6be1fa6cad4e80d211b8ef241f8824e0ea1c709b7b21a0281cad4292f4dc
-
SSDEEP
768:x2buKugKAnfRXxsnbs1N7Ujl47Ldyy1ls8B9zyBtuNNNpMfFdRuzc/1H5Ji4Xdnq:kbuK+oJWnbsXUjQEyQW0RfJuquK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e6b0acfb008898e750b5feb8b75a66de80d127723091d1084c0677994d5590eb
Files
-
e6b0acfb008898e750b5feb8b75a66de80d127723091d1084c0677994d5590eb.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ