Static task
static1
Behavioral task
behavioral1
Sample
0ecb8e192c78a831bdc52b2012932028f5e28e17a474aea40178bbe7f6ad4435.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0ecb8e192c78a831bdc52b2012932028f5e28e17a474aea40178bbe7f6ad4435.exe
Resource
win10v2004-20230703-en
General
-
Target
0ecb8e192c78a831bdc52b2012932028f5e28e17a474aea40178bbe7f6ad4435
-
Size
989KB
-
MD5
e3919c573e6ff10627ea891af49e1bbb
-
SHA1
c15caa4581a23584e082d5fe125d19c685e38530
-
SHA256
0ecb8e192c78a831bdc52b2012932028f5e28e17a474aea40178bbe7f6ad4435
-
SHA512
9693a78a4fcd2d6ef8ded8b06abdc44dc492796ba5eb7826a7a72da2ebfa03f993ba529b1c8084e0f4e2e561e46a9e548e081b1ec2dd935a9560f209584bb4d9
-
SSDEEP
12288:dGqN38/aZAESjp4MviIov8aIVfJoJPPj8dsnhbj0w7ASlcmqqQJY:C4MvRaIVhoJPPjmshbj04AycmFQ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ecb8e192c78a831bdc52b2012932028f5e28e17a474aea40178bbe7f6ad4435
Files
-
0ecb8e192c78a831bdc52b2012932028f5e28e17a474aea40178bbe7f6ad4435.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 984KB - Virtual size: 983KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ