Static task
static1
Behavioral task
behavioral1
Sample
eb1c6173c30b54781784f5add507e579db21f63a2a56c305cb0d5b21730413d8.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
eb1c6173c30b54781784f5add507e579db21f63a2a56c305cb0d5b21730413d8.exe
Resource
win10v2004-20240508-en
General
-
Target
eb1c6173c30b54781784f5add507e579db21f63a2a56c305cb0d5b21730413d8
-
Size
14KB
-
MD5
49e6e1f578e32b6df56c9c4dadb8f1f9
-
SHA1
0a31cc861fde772eb30e174d24d2bf9d69e31f6b
-
SHA256
eb1c6173c30b54781784f5add507e579db21f63a2a56c305cb0d5b21730413d8
-
SHA512
3577fbd2dd5e8778aa346aaf2826d67ece67d3054a5bc79065b5b651d89aed626c1d19c1aa84df4c32093c757e9c75d185c2bcbe981381edb44cf13b05074b8e
-
SSDEEP
192:nG/atdeMedpTtm0a8MbHaOKtbxe2QCEYTzk7QkpiAKAxxSqDE045HQ:nG/cah/NOKRxkYTyMAKAxxlDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb1c6173c30b54781784f5add507e579db21f63a2a56c305cb0d5b21730413d8
Files
-
eb1c6173c30b54781784f5add507e579db21f63a2a56c305cb0d5b21730413d8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ