Static task
static1
Behavioral task
behavioral1
Sample
ea6ca8b50b5fa2bb41ccca9076020cc9ce9e53068fa85cb1be11d1ef1a3c591a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ea6ca8b50b5fa2bb41ccca9076020cc9ce9e53068fa85cb1be11d1ef1a3c591a.exe
Resource
win10v2004-20230220-en
General
-
Target
ea6ca8b50b5fa2bb41ccca9076020cc9ce9e53068fa85cb1be11d1ef1a3c591a.exe
-
Size
724KB
-
MD5
ab2bcbee3ca6c8b3a361f3ffb6e58fd3
-
SHA1
de2a6d7752e24116551b07151fc2ba35e60e5611
-
SHA256
ea6ca8b50b5fa2bb41ccca9076020cc9ce9e53068fa85cb1be11d1ef1a3c591a
-
SHA512
59b813edc8c60f08445a1e210269cb0a4e27ec877f15d4ea8f45bd7f351db308fbedba50c7e415f5913e9f02d9923e9e4a233115350d75b0bc4e81df28343639
-
SSDEEP
12288:1OVz+PnueUEl4tvxsXxs2egQVtzK4QS83+HS17br5WNLZJPI85MVFWGJmEuDv5/1:8+NUElYshsZX3byxlU7MHXgDx/qs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea6ca8b50b5fa2bb41ccca9076020cc9ce9e53068fa85cb1be11d1ef1a3c591a.exe
Files
-
ea6ca8b50b5fa2bb41ccca9076020cc9ce9e53068fa85cb1be11d1ef1a3c591a.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 711KB - Virtual size: 711KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ