Static task
static1
Behavioral task
behavioral1
Sample
e1d1d2cad960fe81f9316e508c6818fd8509a5837e5162557b35deca31390334.exe
Resource
win7-20240903-en
General
-
Target
e1d1d2cad960fe81f9316e508c6818fd8509a5837e5162557b35deca31390334
-
Size
1.9MB
-
MD5
82ce7ff813c213135d425f58c0f4ffc9
-
SHA1
f664a5b760fd4803b297c60a8d5d724f0774c7e3
-
SHA256
e1d1d2cad960fe81f9316e508c6818fd8509a5837e5162557b35deca31390334
-
SHA512
1b9a9ed79d04cfd2c369b8776f8f239a436bd1da14a3d828457a1130b87667036eb879003888ca63dc27e48617d6b15f8204d09bfa07aee857007d5beff99421
-
SSDEEP
49152:Z68jF+j4psl2HJad/9iufFHkyWG064lU0k:ZbTslgadViutHkjjc0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1d1d2cad960fe81f9316e508c6818fd8509a5837e5162557b35deca31390334
Files
-
e1d1d2cad960fe81f9316e508c6818fd8509a5837e5162557b35deca31390334.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 147KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
htnftyef Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nmtllbnj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE