Static task
static1
Behavioral task
behavioral1
Sample
e1f8802b6eb2b3dd14e875ee4b5ea1ccb5ad1a2d6cb190fcce6645e7a39dbdca.exe
Resource
win7-20240903-en
General
-
Target
e1f8802b6eb2b3dd14e875ee4b5ea1ccb5ad1a2d6cb190fcce6645e7a39dbdca
-
Size
3.1MB
-
MD5
6a10ecc330fd0b35dfa8e46144f7bff3
-
SHA1
29291d2fe144caab85d565975b2ce3249efd26b4
-
SHA256
e1f8802b6eb2b3dd14e875ee4b5ea1ccb5ad1a2d6cb190fcce6645e7a39dbdca
-
SHA512
18c2bff1cabb4a2c7c558bdcb4d064dc85cbabd158a43eeff13579f833550230b8687e4b675e597015cbe27fa935f961451eb28cf59cb3c7b404b349f1cdafff
-
SSDEEP
98304:Tr/Ad5KvEEBxawOYNwNxRVz8L0lq4RErJ:TreO4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1f8802b6eb2b3dd14e875ee4b5ea1ccb5ad1a2d6cb190fcce6645e7a39dbdca
Files
-
e1f8802b6eb2b3dd14e875ee4b5ea1ccb5ad1a2d6cb190fcce6645e7a39dbdca.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
acbdevbl Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rjlqtpem Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE