Static task
static1
Behavioral task
behavioral1
Sample
ea929f3980e4b2a2f88dccfb0f74453ddb4880cdfa78f79a39efa748dbdd0783.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ea929f3980e4b2a2f88dccfb0f74453ddb4880cdfa78f79a39efa748dbdd0783.exe
Resource
win10v2004-20240426-en
General
-
Target
ea929f3980e4b2a2f88dccfb0f74453ddb4880cdfa78f79a39efa748dbdd0783
-
Size
5.5MB
-
MD5
100f5dc51fa13949b4c89c74b7cb8864
-
SHA1
33f1782f5816199e6862c7d53d3d0e0217a4f15c
-
SHA256
ea929f3980e4b2a2f88dccfb0f74453ddb4880cdfa78f79a39efa748dbdd0783
-
SHA512
294f29b32e625d429a3b01fd680c24a64bb0106fc6b0a27c3d29d0c319a6e837dfb8dbebfe3c67b2cc56e8c36855c266c23293b9b4b8a1dcac8543027c9efd86
-
SSDEEP
12288:H11pLvIRm0sKA5p8Wgx+gWVBmLnWrOxNuxC7:HDp0woAL8WJm8MoC7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea929f3980e4b2a2f88dccfb0f74453ddb4880cdfa78f79a39efa748dbdd0783
Files
-
ea929f3980e4b2a2f88dccfb0f74453ddb4880cdfa78f79a39efa748dbdd0783.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jfbbql Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ