Static task
static1
Behavioral task
behavioral1
Sample
ececb8cf9b9572194d177dfcf04bacc1.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ececb8cf9b9572194d177dfcf04bacc1.exe
Resource
win10v2004-20240508-en
General
-
Target
ececb8cf9b9572194d177dfcf04bacc1.exe
-
Size
17.4MB
-
MD5
2e35c910027a4efcb1133d3247b146e4
-
SHA1
badabb1d85624d6b8380d1b2c7bfd0f47aa29610
-
SHA256
e20a540b3319728685a2209c51aaeee663ee6b73268e024d0b73325bc2f53325
-
SHA512
4d1d502fde4fcfb5bcac0f2d902e7f558f67c44c47557fbbce7861e1d0cd78891699ec0823620bfe422a82df89cfd20b5720dbdc4ff8635eff1bfb5fed08345e
-
SSDEEP
393216:4d196AAUJxsQ2EqcfKRBV7bmglq+xEKD7lguFkzsfYDjuowte:yfDJ2CKHVJPBga/YDX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ececb8cf9b9572194d177dfcf04bacc1.exe
Files
-
ececb8cf9b9572194d177dfcf04bacc1.exe.exe windows:6 windows x86 arch:x86
3cb339debbcef0f199fcf0a12bdc4eb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
user32
MessageBoxA
Sections
1DfCOeBn Size: - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
FaK3tA7z Size: - Virtual size: 61B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Pu2bwg9C Size: - Virtual size: 13B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
aZdOeeiq Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
a0ScsODS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WiAfNVw3 Size: - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f1bOIp2B Size: - Virtual size: 25B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EOwwQ3de Size: - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VKlBy44g Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vvRv7kGv Size: - Virtual size: 13.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
L7UUwSCy Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TVCBLGWU Size: 17.4MB - Virtual size: 17.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
NiDB8bJ1 Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ