entry
Static task
static1
Behavioral task
behavioral1
Sample
ea6b5481b7aac8197f01165fd064bba0N.dll
Resource
win7-20240704-en
General
-
Target
ea6b5481b7aac8197f01165fd064bba0N.exe
-
Size
124KB
-
MD5
ea6b5481b7aac8197f01165fd064bba0
-
SHA1
6f33f8c5d2f384d31bd4fcda96c056a1151232bd
-
SHA256
0a690b97ed5ab6a548cec81f5a632c80fcedde6fc7f26d126363dc8924c969fe
-
SHA512
1741c4726cd6ad03a448221a32b9443f76bf91ad0ae4e189ebd53902aec2ac3a9a7f112694496b98d33c043761953aa3512cc4d950b58f56f95f263450d32a4a
-
SSDEEP
3072:2UxRet7AyQj0cx3zJOqCNVy9s6fCZ1U2nIR:uTcVzJO9nm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea6b5481b7aac8197f01165fd064bba0N.exe
Files
-
ea6b5481b7aac8197f01165fd064bba0N.exe.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ