Static task
static1
Behavioral task
behavioral1
Sample
ee5b8957ec57d9d88373a9673e665992fcb649cf8fc21f20f6ca4852e209662a.exe
Resource
win10v2004-20240412-es
General
-
Target
ee5b8957ec57d9d88373a9673e665992fcb649cf8fc21f20f6ca4852e209662a.7z
-
Size
3.8MB
-
MD5
cccc470e9a4b2564bb579ef0f48d2cb2
-
SHA1
ae2ee22f2cb720a685251e1ab4234bcc648568b0
-
SHA256
dbe831a94e5e4970749bf5ea5e46f86c5c91af20f13a867bf557d1c569e65335
-
SHA512
7bd6d0bc098768cf5c402a8efa96e33357d002b57492c4cec12f19b91280c4fae5303ad9825e5b8736d5349743c3aae5ced0e11cbcd40329519013a5537d0c34
-
SSDEEP
98304:WlsCJ71Nl8QBJ14U9Kw+sZRc2vjZaTtpYxT:WPvb8QBj4UlhRc2NaTtpYV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ee5b8957ec57d9d88373a9673e665992fcb649cf8fc21f20f6ca4852e209662a
Files
-
ee5b8957ec57d9d88373a9673e665992fcb649cf8fc21f20f6ca4852e209662a.7z.7z
Password: infected
-
ee5b8957ec57d9d88373a9673e665992fcb649cf8fc21f20f6ca4852e209662a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 593KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 92KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 9.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.0MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 978KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 230KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 981KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE