Static task
static1
Behavioral task
behavioral1
Sample
e20885cb4967e6f72d4c70dcb97c1fd19aefff88972723b266483a09966916ca.exe
Resource
win7-20241010-en
General
-
Target
e20885cb4967e6f72d4c70dcb97c1fd19aefff88972723b266483a09966916ca.exe
-
Size
1.7MB
-
MD5
e1dcc0eabbbedc586e3f5fd45f8735d0
-
SHA1
b434195b6c7d5a4d5960840d18df55cc1fc3ff79
-
SHA256
e20885cb4967e6f72d4c70dcb97c1fd19aefff88972723b266483a09966916ca
-
SHA512
ef01d622cacef1786a620a25d13bb02280282abf83e5c814bdd22aaf33f222ca88e4af050f0b86ffb82c2b4f21d10661a51008b2de19a2b14085038d046a6254
-
SSDEEP
49152:g7Hqe25z6iBj0ylizFsHZubjhgRwacIj3qeSjikp:gmeTylHZublgRwajCjikp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e20885cb4967e6f72d4c70dcb97c1fd19aefff88972723b266483a09966916ca.exe
Files
-
e20885cb4967e6f72d4c70dcb97c1fd19aefff88972723b266483a09966916ca.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 88KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kerxdhhv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dedzcksa Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE