Static task
static1
Behavioral task
behavioral1
Sample
ea9aa031bd6fafe4bf83372545d0e5d83141c6892d731f360de36528456009db.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ea9aa031bd6fafe4bf83372545d0e5d83141c6892d731f360de36528456009db.exe
Resource
win10v2004-20230220-en
General
-
Target
ea9aa031bd6fafe4bf83372545d0e5d83141c6892d731f360de36528456009db.exe
-
Size
632KB
-
MD5
560b6915220442de1ef7ee0401530ff0
-
SHA1
7c01bf352dc0aa73464ec4b985f1ded9f767b2d4
-
SHA256
ea9aa031bd6fafe4bf83372545d0e5d83141c6892d731f360de36528456009db
-
SHA512
90288f72761c57da5c7b051dbcdddd91c6da98e590ec8b735ffc0b748442804ac71b3b70f45512742f3c0131f51dc0ea2e395a06035159b702af95030664f6ed
-
SSDEEP
12288:rOVVJ4nueUElZjvxsXxs2egQVtNzfWRc6rJPV8NtR4XtoRC4QGW+hYUAGrGWAS1K:wJeUEl7shsDf4cwWtRsXibzxfs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea9aa031bd6fafe4bf83372545d0e5d83141c6892d731f360de36528456009db.exe
Files
-
ea9aa031bd6fafe4bf83372545d0e5d83141c6892d731f360de36528456009db.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ