Static task
static1
Behavioral task
behavioral1
Sample
eccf75d030f9c71be53d7c0b3516bd6cfdd5a5766916011a55c734188c9ee4ab.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
eccf75d030f9c71be53d7c0b3516bd6cfdd5a5766916011a55c734188c9ee4ab.exe
Resource
win10v2004-20231215-en
General
-
Target
eccf75d030f9c71be53d7c0b3516bd6cfdd5a5766916011a55c734188c9ee4ab
-
Size
223KB
-
MD5
fe6bf2472d361e7e6c4105d6e91df008
-
SHA1
7d9484de814c85b144cd1b8db2f13691df8f0621
-
SHA256
eccf75d030f9c71be53d7c0b3516bd6cfdd5a5766916011a55c734188c9ee4ab
-
SHA512
c15f291557d6e1c47cc148ea1039ed04b67b50722c073308e3f218dea2c13ab7d004734a0c5f0fc5fa732cbfe60bcca69a3622ec30f914e7d7c0e4e993bc022f
-
SSDEEP
6144:PWnFhYfH3TkoCwAyfrgjtM9/WWVGix77p3v:unFhSIkAyDgjtS/FZp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eccf75d030f9c71be53d7c0b3516bd6cfdd5a5766916011a55c734188c9ee4ab
Files
-
eccf75d030f9c71be53d7c0b3516bd6cfdd5a5766916011a55c734188c9ee4ab.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 171KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE