Static task
static1
Behavioral task
behavioral1
Sample
02eb2ea3a2b1a29c5775715b3e7900c6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02eb2ea3a2b1a29c5775715b3e7900c6.exe
Resource
win10v2004-20231215-en
General
-
Target
02eb2ea3a2b1a29c5775715b3e7900c6
-
Size
6.6MB
-
MD5
02eb2ea3a2b1a29c5775715b3e7900c6
-
SHA1
c65483f8add218c2166551194d3178681b4c2dfc
-
SHA256
1d2110e1a6b20e6d695404d43b40fd8aba206c1c97246a5982f094bc6a2d6565
-
SHA512
21a801ee4644fd9dd44d4a663a935c9bd6f6396cc092065ba19330ce58ff9d419e6b73bd4200ed490b0a7490731b6a9dd9875311b8c82446b3e75a68ab1175f6
-
SSDEEP
98304:Ll5vLgfQngHlIXx7skk8ESkjLhTFiVVs+KT:LTMS8IXx7skk8FkpTFgsT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02eb2ea3a2b1a29c5775715b3e7900c6
Files
-
02eb2ea3a2b1a29c5775715b3e7900c6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.MPRESS1 Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE