Static task
static1
Behavioral task
behavioral1
Sample
ec5d5cd6025f37b9750e4b6fa95bc169.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ec5d5cd6025f37b9750e4b6fa95bc169.exe
Resource
win10v2004-20230703-en
General
-
Target
ec5d5cd6025f37b9750e4b6fa95bc169.bin
-
Size
537KB
-
MD5
ec5d5cd6025f37b9750e4b6fa95bc169
-
SHA1
803bb1019f4bfed572dce5856f67299ce9bd7087
-
SHA256
c06abec51e8e6b470f66803e7f0654c8f761dfdc5fc23685c14d4ec946975ded
-
SHA512
77b972926219391f6852e380a7ca704c574fa526ed1972706c5ed182e40a31e6506ad47cc03577f8fffe8c9e4b00a0569e1cfc0d6cf2335e1f8893fc84523fef
-
SSDEEP
12288:mELsu/YzyFMVq0xie2IfgXWbRH12jwKxO5HBuwz5y:m0bAuMV8XIfLH8jRxO5HMwz5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec5d5cd6025f37b9750e4b6fa95bc169.bin
Files
-
ec5d5cd6025f37b9750e4b6fa95bc169.bin.exe windows x64
fde9546a339b5b9f162aaecc027feb25
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
WaitMessage
shell32
SHChangeNotifyRegister
kernel32
GetModuleHandleA
advapi32
RegisterEventSourceA
Sections
Size: - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE