Static task
static1
Behavioral task
behavioral1
Sample
eb20d64217936a41a26f57ed238ff78cd0ee10057058f370a1e1a6b252d917aa.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
eb20d64217936a41a26f57ed238ff78cd0ee10057058f370a1e1a6b252d917aa.exe
Resource
win10v2004-20230220-en
General
-
Target
eb20d64217936a41a26f57ed238ff78cd0ee10057058f370a1e1a6b252d917aa
-
Size
1.2MB
-
MD5
64745b199a1f33f719c496d5e5ba5aa8
-
SHA1
3c75b353979fe2e7780863bb3cffa4ac3e42e643
-
SHA256
eb20d64217936a41a26f57ed238ff78cd0ee10057058f370a1e1a6b252d917aa
-
SHA512
f9adf525ef446cc18cd93f490be57ace12c5d44db85618e012954e94d5ceba17843fb6d6f333f333224a15c9cab33025c21ab0d90331e11d270649fe4db63ba6
-
SSDEEP
12288:EQxcTJV10E1dviwd77IOlm5nYNTRhy9jGB91WkY8q/DP4Jun2IR/am4mf4mgIhoa:u10c7d7PWOFnbUP4JC/am4mfk73al
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb20d64217936a41a26f57ed238ff78cd0ee10057058f370a1e1a6b252d917aa
Files
-
eb20d64217936a41a26f57ed238ff78cd0ee10057058f370a1e1a6b252d917aa.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 737KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ