Static task
static1
Behavioral task
behavioral1
Sample
e1b2d72d4a5ecaee370c2d6b0112a982586dbf790334a7a8847900f23d1d567a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e1b2d72d4a5ecaee370c2d6b0112a982586dbf790334a7a8847900f23d1d567a.exe
Resource
win10v2004-20241007-en
General
-
Target
e1b2d72d4a5ecaee370c2d6b0112a982586dbf790334a7a8847900f23d1d567a
-
Size
401KB
-
MD5
81a112e3ea530b03e431d4c61c7dce51
-
SHA1
e4480ca58192d5b228a364457b782997a4a28b3e
-
SHA256
e1b2d72d4a5ecaee370c2d6b0112a982586dbf790334a7a8847900f23d1d567a
-
SHA512
de6202ab80abe86868c92d9a885575987f2bbd644f28bb3f4401a3ce5adef6b67794e44b59fb53d22e722bae8b4b6d27d0cd86de8b9af82f0bd8fed7e0b65185
-
SSDEEP
12288:zJFKXyvba0JDNEm/5p5QmqNI86J0mJv7P:zzbWKDNEm/5p5ZJ0g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b2d72d4a5ecaee370c2d6b0112a982586dbf790334a7a8847900f23d1d567a
Files
-
e1b2d72d4a5ecaee370c2d6b0112a982586dbf790334a7a8847900f23d1d567a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ