Static task
static1
Behavioral task
behavioral1
Sample
ebc0e3ba37f42ba3a82e90ca72fc99b843e5ad5f4efa7f7956fa45b79d159a76.exe
Resource
win10v2004-20240226-en
General
-
Target
ebc0e3ba37f42ba3a82e90ca72fc99b843e5ad5f4efa7f7956fa45b79d159a76
-
Size
1.8MB
-
MD5
acf5d231a7f924d680c4836213aa15cd
-
SHA1
bafd9a72d183ce5aaa89b397dc435d703344e91b
-
SHA256
ebc0e3ba37f42ba3a82e90ca72fc99b843e5ad5f4efa7f7956fa45b79d159a76
-
SHA512
a07c280a846688fb954bba7bba1e25941604ee2944376b0e02622103b97b0c7a2a1f79071c477bc8c246d49d37e341ef8831a9ee843077180e9fb6b6b82382e3
-
SSDEEP
49152:lDkM3HwTh0dCCqQ9futY8uEy3xCYE3cNVd6o:psh0hjhCY+2Vd6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ebc0e3ba37f42ba3a82e90ca72fc99b843e5ad5f4efa7f7956fa45b79d159a76
Files
-
ebc0e3ba37f42ba3a82e90ca72fc99b843e5ad5f4efa7f7956fa45b79d159a76.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wjyvesdg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fsbinqax Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE