Static task
static1
Behavioral task
behavioral1
Sample
ef64e1a610ab519b81a64ea98570c3f975a29a3ab046f36fc4f95edd116ad5ec.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ef64e1a610ab519b81a64ea98570c3f975a29a3ab046f36fc4f95edd116ad5ec.exe
Resource
win10-20240404-en
General
-
Target
ef64e1a610ab519b81a64ea98570c3f975a29a3ab046f36fc4f95edd116ad5ec
-
Size
5.2MB
-
MD5
3e682c29635dfc35b92d446176db227f
-
SHA1
2b7e1a854b2f69fddc1d6628ffd4595819ccd794
-
SHA256
ef64e1a610ab519b81a64ea98570c3f975a29a3ab046f36fc4f95edd116ad5ec
-
SHA512
4e3f2f04f6c0e13b99e38b94e32517d462ea9bbd3359845fcaf402743c92c2e7b5917923ac862a30bfb73514e8d2b1ea935120ab1e35fc16b031a34b501c33bb
-
SSDEEP
98304:+bYUChYVcX3O2enJj6ZU4Ly69IpNG0AI3yW1SK+lVeoplQeupMLInuDdDB0Ud1Zp:OshGae2QJK06SphA0yW1SJJlduSLxNqY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef64e1a610ab519b81a64ea98570c3f975a29a3ab046f36fc4f95edd116ad5ec
Files
-
ef64e1a610ab519b81a64ea98570c3f975a29a3ab046f36fc4f95edd116ad5ec.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ