Static task
static1
Behavioral task
behavioral1
Sample
ef43e3690d581f49a3b9d534e8ff3873f3811124c5b08ab9e0654e9018d5f34c.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef43e3690d581f49a3b9d534e8ff3873f3811124c5b08ab9e0654e9018d5f34c.exe
Resource
win10v2004-20240802-en
General
-
Target
ef43e3690d581f49a3b9d534e8ff3873f3811124c5b08ab9e0654e9018d5f34c
-
Size
488KB
-
MD5
34043d652c6669c2bb3de1aa396f48b6
-
SHA1
02d07ad408073ca4f0424fd6a8dbff81f204f5af
-
SHA256
ef43e3690d581f49a3b9d534e8ff3873f3811124c5b08ab9e0654e9018d5f34c
-
SHA512
b6d99ef57767ba1aaf9725b607dd64f59c5bbfb349a276a3e847cc5eb96f2dc95ad8f5cfc93bef9c386f2b74330059e0664daf6856192df2c77b5e29b4ab04af
-
SSDEEP
12288:V/Mj/MP/Mx/M7/Mx/M4/MpBE/Mk/M2/M1:VkK2O2HIBEd7M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef43e3690d581f49a3b9d534e8ff3873f3811124c5b08ab9e0654e9018d5f34c
Files
-
ef43e3690d581f49a3b9d534e8ff3873f3811124c5b08ab9e0654e9018d5f34c.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 52KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE