Static task
static1
Behavioral task
behavioral1
Sample
ebf2f13f1efbf54b2f59e0a60b69f695765a423e5d4882de20847e22325efb0d.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ebf2f13f1efbf54b2f59e0a60b69f695765a423e5d4882de20847e22325efb0d.exe
Resource
win10v2004-20231025-en
General
-
Target
ebf2f13f1efbf54b2f59e0a60b69f695765a423e5d4882de20847e22325efb0d.exe.zip
-
Size
1.2MB
-
MD5
cb9f5c618f3e21d2bf92f50584f98869
-
SHA1
33e060e5102665f63a72c06d43941af44b81f543
-
SHA256
555202e4d20f4f2a3f9d69a440a4f5153082adc9d50747867590f8244c4f2d59
-
SHA512
b97287aa27671c327497e6d2ab6f5f5b3f9eef64565119057fc253b2bb19c59f39638679c2257a95b2ca8d99c95ec0c47db7818de44597ea42c439e826dacc00
-
SSDEEP
24576:CKaYMk6YwbA7mU1Q8F7YY/huclitrV3aMx7j5CdJzV43Ft6:HbwMzFGYJucm9Bl6Jzq6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ebf2f13f1efbf54b2f59e0a60b69f695765a423e5d4882de20847e22325efb0d.exe
Files
-
ebf2f13f1efbf54b2f59e0a60b69f695765a423e5d4882de20847e22325efb0d.exe.zip.zip
Password: infected
-
ebf2f13f1efbf54b2f59e0a60b69f695765a423e5d4882de20847e22325efb0d.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 14KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE