Static task
static1
Behavioral task
behavioral1
Sample
01eb78bc7af75a04b5ed1279a4a21e6209a631b04505979f944117cc100e5d25.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
01eb78bc7af75a04b5ed1279a4a21e6209a631b04505979f944117cc100e5d25.exe
Resource
win10v2004-20230915-en
General
-
Target
01eb78bc7af75a04b5ed1279a4a21e6209a631b04505979f944117cc100e5d25
-
Size
1.0MB
-
MD5
07faccf018bea7d96d794cddd9bd8cf2
-
SHA1
ae8e7863d1c1105c3e4ef23a007ced42f030c94f
-
SHA256
01eb78bc7af75a04b5ed1279a4a21e6209a631b04505979f944117cc100e5d25
-
SHA512
0b6ca35357968393b8bf489cb895f65f39269eb226feeb1f0d17b4ffb5a9689610d3e2d3e44932dd7b154dc6adb6a35239bd1d7c0b0e4c6923c1698c7f143d65
-
SSDEEP
12288:ie9mDMJPwnYwT0pZfehDFFbQ3bYGppGnUNPaGyCbo7ippR6zUjyHRuF2O:XyWeTJ5KzjEBCqCqwuoF2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01eb78bc7af75a04b5ed1279a4a21e6209a631b04505979f944117cc100e5d25
Files
-
01eb78bc7af75a04b5ed1279a4a21e6209a631b04505979f944117cc100e5d25.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 561KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!rc! Size: - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.poly Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 279KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ