Static task
static1
Behavioral task
behavioral1
Sample
e9c2ae76f3c75635d6588866674757023c2dabd947abe8864cfbd155cf22e7ed.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9c2ae76f3c75635d6588866674757023c2dabd947abe8864cfbd155cf22e7ed.exe
Resource
win10v2004-20241007-en
General
-
Target
e9c2ae76f3c75635d6588866674757023c2dabd947abe8864cfbd155cf22e7ed.exe
-
Size
416KB
-
MD5
4b4b842e67389dbaa6756b528c317370
-
SHA1
344abedefc91910c9feaa05c18714b067525e555
-
SHA256
e9c2ae76f3c75635d6588866674757023c2dabd947abe8864cfbd155cf22e7ed
-
SHA512
ac773f956aaccc2d0ede13ae2814f29c2b259d59a8a9a66ea761595a47c0c162f0b457d79ac1775050a21bc00486c08d1a52b179d8ff9b61b116e3b5e5e01e06
-
SSDEEP
6144:pb+QWIhV2WPguI87PQOB3xbkuZanpNh2w75aqfyjL6KSgDoaC/MtStAr5ijt+g2U:AQnrw7AqfcLTSgEEVijNsED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e9c2ae76f3c75635d6588866674757023c2dabd947abe8864cfbd155cf22e7ed.exe
Files
-
e9c2ae76f3c75635d6588866674757023c2dabd947abe8864cfbd155cf22e7ed.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 374KB - Virtual size: 373KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ