Static task
static1
Behavioral task
behavioral1
Sample
edac1a3b93c6b7d7dd4c0dae6dcc16b71c751408b6b81339ee70e1cc5d6190a0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
edac1a3b93c6b7d7dd4c0dae6dcc16b71c751408b6b81339ee70e1cc5d6190a0.exe
Resource
win10v2004-20231023-en
General
-
Target
edac1a3b93c6b7d7dd4c0dae6dcc16b71c751408b6b81339ee70e1cc5d6190a0
-
Size
4.5MB
-
MD5
dc04f315d40029de9a572acb1b2de893
-
SHA1
dffbd59cf801686e4fc020180b079a7ceae4f843
-
SHA256
edac1a3b93c6b7d7dd4c0dae6dcc16b71c751408b6b81339ee70e1cc5d6190a0
-
SHA512
ceb6d6f5c7207518809f0d9c35f38587ede10894f704c604e32db78cd475ba324963e9909f6ac31ecba241dfb69903ae8d23855a4520b4b0c801967d0e70f6d0
-
SSDEEP
49152:f5PEdOAS2HXe7N8CSLSDC/QJs9r6VtIoRUtzaKcreDxS9sTFT+EL0:85FCS+DCoJs9r6VtnRayek9SL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edac1a3b93c6b7d7dd4c0dae6dcc16b71c751408b6b81339ee70e1cc5d6190a0
Files
-
edac1a3b93c6b7d7dd4c0dae6dcc16b71c751408b6b81339ee70e1cc5d6190a0.exe windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 558KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 1024B - Virtual size: 806B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 72B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 451KB - Virtual size: 451KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE