Static task
static1
Behavioral task
behavioral1
Sample
1e9df82ba8773b8b148bca66ae6dbb8030b95ba8c0f286520ee091559e9fd8a4N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1e9df82ba8773b8b148bca66ae6dbb8030b95ba8c0f286520ee091559e9fd8a4N.exe
Resource
win10v2004-20241007-en
General
-
Target
1e9df82ba8773b8b148bca66ae6dbb8030b95ba8c0f286520ee091559e9fd8a4N
-
Size
77KB
-
MD5
eb34592eec8858a5b36173181e3e02f0
-
SHA1
f1f623392a0b0c5ef96efa4d8ff53c659aefabad
-
SHA256
1e9df82ba8773b8b148bca66ae6dbb8030b95ba8c0f286520ee091559e9fd8a4
-
SHA512
5e348b1a0675b657eafa45a376ad6240ccd89da5b0bb931f4caa456329d53809a14bd42189da96e95a265bf9368e8336a412d912bfa0b0b36684856762cf9e16
-
SSDEEP
1536:/RNZDkkH8+I90V3Od3Vbn1lW2Ltiwfi+TjRC/:JNZDK+I92OFVbn1l7Mwf1TjY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e9df82ba8773b8b148bca66ae6dbb8030b95ba8c0f286520ee091559e9fd8a4N
Files
-
1e9df82ba8773b8b148bca66ae6dbb8030b95ba8c0f286520ee091559e9fd8a4N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
prot Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ