Static task
static1
Behavioral task
behavioral1
Sample
e5f085901342aae6c0cc57ffef257027367fcfd306bc8130caf9899031e625ce.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e5f085901342aae6c0cc57ffef257027367fcfd306bc8130caf9899031e625ce.exe
Resource
win10v2004-20250217-en
General
-
Target
e5f085901342aae6c0cc57ffef257027367fcfd306bc8130caf9899031e625ce
-
Size
4.0MB
-
MD5
9e17cfaca21dbfa6468533a2e3240d63
-
SHA1
ca0294f682135f5d22ab1856c1a80dd084ebbcb4
-
SHA256
e5f085901342aae6c0cc57ffef257027367fcfd306bc8130caf9899031e625ce
-
SHA512
8d3ca870445a98f19b896b9b0cd89be4aa2f9812d0c6656981d9b0dcc1b4031e78f1dadd48bfdae41e3a446421414791cbb8584164426fd401c8adff389a22e1
-
SSDEEP
98304:s6BxHpylrSVzDZYBh3acuwo+xaj4/Uz4YRWUjaFKQAoj:s6BxgloGBh3po+xaaU0DKQZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5f085901342aae6c0cc57ffef257027367fcfd306bc8130caf9899031e625ce
Files
-
e5f085901342aae6c0cc57ffef257027367fcfd306bc8130caf9899031e625ce.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.2MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oaxnfyeh Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wwcscrtk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE