Static task
static1
Behavioral task
behavioral1
Sample
eed6c32d0ac5ba8fcecd798b9b8cb68d2f3b62e9a016cdf03c3180210e1bab89.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
eed6c32d0ac5ba8fcecd798b9b8cb68d2f3b62e9a016cdf03c3180210e1bab89.exe
Resource
win10v2004-20240802-en
General
-
Target
eed6c32d0ac5ba8fcecd798b9b8cb68d2f3b62e9a016cdf03c3180210e1bab89
-
Size
144KB
-
MD5
c476bcd07a020558a631b7c3c82f8598
-
SHA1
6b0ac923d1f95d55e2dec7ce300f8e0997ccbcde
-
SHA256
eed6c32d0ac5ba8fcecd798b9b8cb68d2f3b62e9a016cdf03c3180210e1bab89
-
SHA512
84bdc8739f402a3075e27cc09509894fb63198122292834ba582f54b6215f1afba856be8c9c36741fcecf63502df9e3293a76c657f0e1dab8c1d0176a67a98fe
-
SSDEEP
3072:FtrdJqpqa1PXuhuXGQmVDeCyqOGbo92ynnbb:FtZyPXuapoaCPXbo92ynn3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eed6c32d0ac5ba8fcecd798b9b8cb68d2f3b62e9a016cdf03c3180210e1bab89
Files
-
eed6c32d0ac5ba8fcecd798b9b8cb68d2f3b62e9a016cdf03c3180210e1bab89.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wixburn Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ