Static task
static1
Behavioral task
behavioral1
Sample
ea80b9ae541a5ef041d2d8b8029eefa6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ea80b9ae541a5ef041d2d8b8029eefa6.exe
Resource
win10v2004-20230915-en
General
-
Target
ea80b9ae541a5ef041d2d8b8029eefa6.bin
-
Size
9.4MB
-
MD5
ea80b9ae541a5ef041d2d8b8029eefa6
-
SHA1
63cd8ec8eff6c05f914ab5ce3f4c9075747d984c
-
SHA256
841b4ddca1461c5392472c234741f16a9f259f5dc01b8065ebd5ec76cc8efa6f
-
SHA512
b29848f4ef079e6c1a52c39efdcc451a33f5b0ff0a6a49c60ef3c8c3c31da2eeb17fef8a96f4200419d7205fccfa16c0c17b9ca58f6c46a42068bfd7d5d71921
-
SSDEEP
196608:1Sh+Pinx/SEUFGC6M1jN6aS+1eSP3n5ODNgvR2MtbkZXPvCBkEs:wh+anVFLC6MNA3ivnv5KZXPKBps
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea80b9ae541a5ef041d2d8b8029eefa6.bin
Files
-
ea80b9ae541a5ef041d2d8b8029eefa6.bin.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ