Static task
static1
Behavioral task
behavioral1
Sample
efc70ef46aacf8ed99b9333aa7eef1121f36a5ade1f8c0a0cb4c9074921fbe8b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
efc70ef46aacf8ed99b9333aa7eef1121f36a5ade1f8c0a0cb4c9074921fbe8b.exe
Resource
win10v2004-20230915-en
General
-
Target
efc70ef46aacf8ed99b9333aa7eef1121f36a5ade1f8c0a0cb4c9074921fbe8b
-
Size
1.5MB
-
MD5
fa0c3e26cbf0e5fff9c35bd31fcf3e56
-
SHA1
7687512f469529acd1633892ed3550aef144ef51
-
SHA256
efc70ef46aacf8ed99b9333aa7eef1121f36a5ade1f8c0a0cb4c9074921fbe8b
-
SHA512
232afcba98e72d3a8bd3e38b250ad9b1db04352192cea89bc7b78d1a0c7df95748e08bdeaa50321eac9fb2d30092fede571960d28cda74ec30000fda6c9d88a2
-
SSDEEP
24576:HJvKzZQYfXDPJZOE9PjCFaAL11MJY7pjtafbojRAaUtYQCK16dck0tWrHPNZFlPZ:9KNQYfDPJZr9ra11M+jtIbCRLlv7p0tO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efc70ef46aacf8ed99b9333aa7eef1121f36a5ade1f8c0a0cb4c9074921fbe8b
Files
-
efc70ef46aacf8ed99b9333aa7eef1121f36a5ade1f8c0a0cb4c9074921fbe8b.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.ifc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE