Static task
static1
Behavioral task
behavioral1
Sample
ebbe0fa7c8e07e2bfad5267d6db5b4f1aaa2e2e03c12b4d0526489ffeb8fcef8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ebbe0fa7c8e07e2bfad5267d6db5b4f1aaa2e2e03c12b4d0526489ffeb8fcef8.exe
Resource
win10v2004-20230915-en
General
-
Target
ebbe0fa7c8e07e2bfad5267d6db5b4f1aaa2e2e03c12b4d0526489ffeb8fcef8
-
Size
847KB
-
MD5
d1b45ccc4b25a266a449adb76abb9b79
-
SHA1
9b439ff905e66233708d63d53ab12c514858c038
-
SHA256
ebbe0fa7c8e07e2bfad5267d6db5b4f1aaa2e2e03c12b4d0526489ffeb8fcef8
-
SHA512
f716349801f3f230a9f95102f52937ccb6d9235bd3f78dee2c5934adbd6c436a2c4c61ded7ea38ed6a6d791bbc1e0b5865657f22ea4bd55c591c17f85bb96bfb
-
SSDEEP
24576:bQTIFfKKJe+WtmWSSC3GNQHuQ5UsiIhp/DN6eg:bQIC4ewj3GqP2uRDk7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebbe0fa7c8e07e2bfad5267d6db5b4f1aaa2e2e03c12b4d0526489ffeb8fcef8
Files
-
ebbe0fa7c8e07e2bfad5267d6db5b4f1aaa2e2e03c12b4d0526489ffeb8fcef8.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.1MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE