Static task
static1
Behavioral task
behavioral1
Sample
eb377756e6a119d66965e859b18ec7232dd25f26a7e5ec77c51d158689a50269.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
eb377756e6a119d66965e859b18ec7232dd25f26a7e5ec77c51d158689a50269.exe
Resource
win10v2004-20230703-en
General
-
Target
eb377756e6a119d66965e859b18ec7232dd25f26a7e5ec77c51d158689a50269
-
Size
791KB
-
MD5
5251d31adf8388cfab7aaecbfebe312e
-
SHA1
80f1ad08d32979da641124829b0fe514cb6a9108
-
SHA256
eb377756e6a119d66965e859b18ec7232dd25f26a7e5ec77c51d158689a50269
-
SHA512
ca7e78372ad408fe34f6b14e8f2c8a40500ad0ab488266be94bcf16dbd20745d51a26386b8a7621eb0b233fa096ab54aa9caf1c8e7f77b019b55d7bf7f933afa
-
SSDEEP
12288:QJtHr6Pcitci8EiPpK1e0HqEpD1GdNCInwI+cpKMW2CGk2kyUJimE:QJ9ecvi8lPpKQukdIZwH/kDJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb377756e6a119d66965e859b18ec7232dd25f26a7e5ec77c51d158689a50269
Files
-
eb377756e6a119d66965e859b18ec7232dd25f26a7e5ec77c51d158689a50269.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 634KB - Virtual size: 634KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE