Static task
static1
Behavioral task
behavioral1
Sample
eb2eba8204028cb498b6f7576814fff83318556ca6102bff3d0e526362665146.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
eb2eba8204028cb498b6f7576814fff83318556ca6102bff3d0e526362665146.exe
Resource
win11-20240709-en
General
-
Target
eb2eba8204028cb498b6f7576814fff83318556ca6102bff3d0e526362665146
-
Size
1.8MB
-
MD5
d0ca12557912e6f552127a86970da87f
-
SHA1
d4825c37650757e04c9c2aef6b4635dbb9e67caf
-
SHA256
eb2eba8204028cb498b6f7576814fff83318556ca6102bff3d0e526362665146
-
SHA512
32d78e8c482e0fd3d2918de8e012ee8558d62fc8c412682a04076ac9286a598157dcc511dba4ebdd28712657fb53fde7521132b7811f1b02f1887e5dbc56392c
-
SSDEEP
49152:m7HkRovPsbUqt9SzncvaoXw0mfyfL30lOMvhWbbRmsF:m7HkSPtgSozSMMpWbbRX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb2eba8204028cb498b6f7576814fff83318556ca6102bff3d0e526362665146
Files
-
eb2eba8204028cb498b6f7576814fff83318556ca6102bff3d0e526362665146.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pchrienx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
numkbugd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE