Static task
static1
Behavioral task
behavioral1
Sample
9ebebcf48126f8a6ca13843820bb356a6af8e1240f3e3e64442a907d080cfa47.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9ebebcf48126f8a6ca13843820bb356a6af8e1240f3e3e64442a907d080cfa47.exe
Resource
win10v2004-20240709-en
General
-
Target
9ebebcf48126f8a6ca13843820bb356a6af8e1240f3e3e64442a907d080cfa47
-
Size
93KB
-
MD5
8e8a75e8077a462002f318e84e2db7b4
-
SHA1
e21b576c17e42c7e45e3e09b1bb1d965bf8a6d5a
-
SHA256
9ebebcf48126f8a6ca13843820bb356a6af8e1240f3e3e64442a907d080cfa47
-
SHA512
5e1aa68d5e914abd82b79961ee43211c4b20bdaa165c44afbb7efe0b8e014b4365dd6d11f8a863467241ad82f1408131493d1aa92e968afddfa552e3ab1eec0b
-
SSDEEP
1536:X1zfheGTziAyA8DaT3GU95iQzqgClqqwxzZsovbvvjjju7eFTEjiwg58:X1JXTp78DE3GG5tWgClqfxz6N7eFgY58
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ebebcf48126f8a6ca13843820bb356a6af8e1240f3e3e64442a907d080cfa47
Files
-
9ebebcf48126f8a6ca13843820bb356a6af8e1240f3e3e64442a907d080cfa47.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ