Static task
static1
Behavioral task
behavioral1
Sample
ea908c66f5efa469bd7e7a9ae20ed4d9.exe
Resource
win7-20231129-en
General
-
Target
ea908c66f5efa469bd7e7a9ae20ed4d9.exe
-
Size
1.2MB
-
MD5
ea908c66f5efa469bd7e7a9ae20ed4d9
-
SHA1
c6db90534545325a9630c486ac7c49cd4f3a079e
-
SHA256
457a94abc03b137e9d75b8618f5ff377519a5c95c7c3f521fd2dd277dc90bc3e
-
SHA512
59b808deae959801fd1d38d4776d1c3744b8600009834709c538499e4b8ed583b08b21d4861db96eaabb31c3b24b1f8dad03dda3a3f70fdfe785f663d4cf7390
-
SSDEEP
24576:RO6KfjtVWdE1c3SQthLzwUqwQ9N2K3yWds0JkKyVb9t9A9c9:064xQSqCugUqliadsLXAO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea908c66f5efa469bd7e7a9ae20ed4d9.exe
Files
-
ea908c66f5efa469bd7e7a9ae20ed4d9.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 492KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 80KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 634KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE