Static task
static1
Behavioral task
behavioral1
Sample
pbi-tools.exe
Resource
win10v2004-20221111-en
General
-
Target
ekastep.zip
-
Size
10.6MB
-
MD5
42208faed9ffd919947ca2e06f6cc202
-
SHA1
0241e716adfe595265146ff2d17102f4c3760647
-
SHA256
9ba35ebcb839faf702a4216811ee38f41fac18f4dbd124f77c4092900c87f382
-
SHA512
1ae458903706dcc1eb9e7f74671af31ba40f277ede77c9ca9408b4661a752bb44bf00f97daf1d5b72d20018730ebf29ca52d23cf19882e1600fe3a610f3771b5
-
SSDEEP
196608:Rv7o/0E/Ip4XOXeSYsLECJD+ZfD3IlMJQ/eB/puESADXVBcjIpMWmbXQFKMJ:ZEB/IyXOOSY7ClOrwdqBurADFl2rQFKA
Malware Config
Signatures
Files
-
ekastep.zip.zip
-
infile.pbix.zip
-
DataModel
-
DiagramLayout
-
Metadata
-
Report/Layout
-
Report/StaticResources/RegisteredResources/AdventureWorksLogo08110190716818466.jpg.png
-
Report/StaticResources/SharedResources/BaseThemes/CY19SU12.json
-
SecurityBindings
-
Settings
-
Version
-
[Content_Types].xml.xml
-
_rels/.rels.xml
-
docProps/custom.xml.xml
-
pbi-tools.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ