Static task
static1
Behavioral task
behavioral1
Sample
ea81c667ce8a5f88d442f4ce533004eb3ab4072e532e32d724fbd45789687d0a.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
ea81c667ce8a5f88d442f4ce533004eb3ab4072e532e32d724fbd45789687d0a.exe
Resource
win10v2004-20240611-en
General
-
Target
ea81c667ce8a5f88d442f4ce533004eb3ab4072e532e32d724fbd45789687d0a
-
Size
2.6MB
-
MD5
22e8495cffbdc7326a71c538e51f8012
-
SHA1
a4ca51056b5e489a190b0b4dc6525222ad5cf072
-
SHA256
ea81c667ce8a5f88d442f4ce533004eb3ab4072e532e32d724fbd45789687d0a
-
SHA512
5d8636755081ac162c7dadefb3ca700805641cc027b31c70c560e921c25dbac6f07341be532ebdee3783351f162c119405931057d43872d7f7c77a6eb917e31e
-
SSDEEP
12288:136sx7BXPsVWFEfyxRaI0XTynA0e/VLwRGINZFXnp3p07IFe83:V6slBX+Wa9xXTyWB6GINZFZ3aXG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea81c667ce8a5f88d442f4ce533004eb3ab4072e532e32d724fbd45789687d0a
Files
-
ea81c667ce8a5f88d442f4ce533004eb3ab4072e532e32d724fbd45789687d0a.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ