Static task
static1
Behavioral task
behavioral1
Sample
ec436ac4230b5aee3167ff520d0c1d9e0083749e15d93e5cf2294537816e83a0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec436ac4230b5aee3167ff520d0c1d9e0083749e15d93e5cf2294537816e83a0.exe
Resource
win10v2004-20240226-en
General
-
Target
ec436ac4230b5aee3167ff520d0c1d9e0083749e15d93e5cf2294537816e83a0.exe
-
Size
820KB
-
MD5
e0ce17e7b225160b20be973dc5d3d46f
-
SHA1
67ffdf69dd6db33051dbd392528ab8958fe26e7f
-
SHA256
ec436ac4230b5aee3167ff520d0c1d9e0083749e15d93e5cf2294537816e83a0
-
SHA512
0646265c420a4e5fd2666d50e55aba8422bbbc0fcc3b94525df7d1ee19958c5f779a36c6b856860d0e31ab2358f061e570d1fd4d01fac58b27ae260be4fbacda
-
SSDEEP
24576:9W7C3c6KsAPcrBlmeA3pt8iE5EL/2IgtY+VTtC:9GBorBlmeMptU5RIgtY+VTt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec436ac4230b5aee3167ff520d0c1d9e0083749e15d93e5cf2294537816e83a0.exe
Files
-
ec436ac4230b5aee3167ff520d0c1d9e0083749e15d93e5cf2294537816e83a0.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 812KB - Virtual size: 811KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ