Static task
static1
Behavioral task
behavioral1
Sample
eca7657e420dd5a8543903ca650c6dc303b7fe9dd2053a6d705d0a803cdbdf7f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eca7657e420dd5a8543903ca650c6dc303b7fe9dd2053a6d705d0a803cdbdf7f.exe
Resource
win10v2004-20240426-en
General
-
Target
eca7657e420dd5a8543903ca650c6dc303b7fe9dd2053a6d705d0a803cdbdf7f
-
Size
10.5MB
-
MD5
c410657768129a3bd38588dacbb87d89
-
SHA1
a1b68a8a947008a526380ce4a24e97bd3dc281c7
-
SHA256
eca7657e420dd5a8543903ca650c6dc303b7fe9dd2053a6d705d0a803cdbdf7f
-
SHA512
30c7c093be4aa9c7cc3f924fd5f673705e4467504744a53d04cf94946f33bbb2a2249cfed20376d75ca9cef927438f0db9b34741c53211616e6d917b1ec9389a
-
SSDEEP
196608:64SpiETmlmcCqSl+hdxJcYIwBF+sV71LhaRvyMEaRyNGyZNPaOrydX85LNzxrFaC:6OETRcWIXXIuF+sV1haFKsyNPryNALNY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eca7657e420dd5a8543903ca650c6dc303b7fe9dd2053a6d705d0a803cdbdf7f
Files
-
eca7657e420dd5a8543903ca650c6dc303b7fe9dd2053a6d705d0a803cdbdf7f.exe windows:4 windows x86 arch:x86
1b543238789165fd55ca1f7fea5cae16
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
GetUserObjectInformationW
advapi32
QueryServiceStatusEx
Sections
Size: - Virtual size: 9.8MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE