hpBo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
EKTEDIR.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
EKTEDIR.exe
Resource
win10v2004-20240226-en
General
-
Target
EKTEDIR.exe
-
Size
746KB
-
MD5
9be19c8e10fb09797a0e3d3c5fc7396f
-
SHA1
51a0a99ede2c3be78a34699fbc213c449c4a1fe3
-
SHA256
fb73f5a127c2ad0f07f45f1c4c556213dd3ce4b4076f4ae20fc8d37988fc883a
-
SHA512
fb93321f88eedbf5e88db24dfdc31086006e5815a22d40d5ac7e71ceda822cc83406f566ea3e152c572ffd9dcaf6eb6222e7fcfe50b7400b7152f68a0044b0dc
-
SSDEEP
12288:UyE0oN04r6Eqc9IVZcrur34V2y9PlQZaePquUvLwW+mL0Sq4e3AyfijHBA:AA4m3xZcruj4MONMP3k+mL+ni
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EKTEDIR.exe
Files
-
EKTEDIR.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 708KB - Virtual size: 706KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ