Static task
static1
Behavioral task
behavioral1
Sample
ecaab36d0665d14e9faac1281b54ed654e35de33c632b3a536b021c82f7c62d3.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ecaab36d0665d14e9faac1281b54ed654e35de33c632b3a536b021c82f7c62d3.exe
Resource
win10v2004-20231020-en
General
-
Target
ecaab36d0665d14e9faac1281b54ed654e35de33c632b3a536b021c82f7c62d3
-
Size
167KB
-
MD5
8aed270c99a037aca1c1e53049d9dbd0
-
SHA1
ed1dbc718a69791f48ce2beb14c73e19cccd43cc
-
SHA256
ecaab36d0665d14e9faac1281b54ed654e35de33c632b3a536b021c82f7c62d3
-
SHA512
e21c977497adb520336f2f26dac31afc8c71f9230b5dc6a0d0ef8d2c0508e38869c742ee4ce35c1ffd9f23ca3d2b582dd2f9f40668648d47c1ab854f31de009f
-
SSDEEP
1536:+vxvTObxvTO0Bu3fThd0gRUC8aCk61b+9exGLToXE7H/SgKJk5K5eoYUeS9IHh:+ZERiWkJs2oGBKIKxYUBIB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecaab36d0665d14e9faac1281b54ed654e35de33c632b3a536b021c82f7c62d3
Files
-
ecaab36d0665d14e9faac1281b54ed654e35de33c632b3a536b021c82f7c62d3.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ