Static task
static1
Behavioral task
behavioral1
Sample
e11d4207bca50300d171fc98f1a739a18b55eb845bb9c08141161393dc9f37fc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e11d4207bca50300d171fc98f1a739a18b55eb845bb9c08141161393dc9f37fc.exe
Resource
win10v2004-20241007-en
General
-
Target
e11d4207bca50300d171fc98f1a739a18b55eb845bb9c08141161393dc9f37fc.exe
-
Size
416KB
-
MD5
bd224ba613c6343724db0cd5baedc0c7
-
SHA1
0178b39e23bbaf9caa24a99d5a14ba11e34c9035
-
SHA256
e11d4207bca50300d171fc98f1a739a18b55eb845bb9c08141161393dc9f37fc
-
SHA512
6b6c07dd9ce366e784e02ed8e9237f5c2f5892934686831cc66663703563bbb48f796785876ea49cb75c313934104ca30944b937afa7ed6ae75dd0d8d2dcdf21
-
SSDEEP
6144:ITNE3ZRrnaBVlvphVxmP+6CiejgcME1cwYfU+va+RU7/:ITNYrnE3bm/CiejewY5vO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e11d4207bca50300d171fc98f1a739a18b55eb845bb9c08141161393dc9f37fc.exe
Files
-
e11d4207bca50300d171fc98f1a739a18b55eb845bb9c08141161393dc9f37fc.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ