Static task
static1
Behavioral task
behavioral1
Sample
ececb8cf9b9572194d177dfcf04bacc1.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ececb8cf9b9572194d177dfcf04bacc1.exe
Resource
win10v2004-20240802-en
General
-
Target
ececb8cf9b9572194d177dfcf04bacc1.exe
-
Size
17.4MB
-
MD5
3b55e2a020172c8aacee99bf59a83876
-
SHA1
b32e06e711aa3159535227fc314299c618e1a0d2
-
SHA256
5b8ee4eef92c202780bb40f8337047f1fd050077e5a06ca8dba654b1d2a08d0f
-
SHA512
f6e595f05410b6bcd116ccabec03ff964cdb80f193888888a386799eb1e095ed45d80b9f1826c1ee15a32ec6496c6a87cd0c12fecdb5d37370e55f42d9a32a73
-
SSDEEP
393216:7d196AAUJxsQ2EqcfKRBV7bmglq+xEKD7lguFkzsfYDjuowte:JfDJ2CKHVJPBga/YDX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ececb8cf9b9572194d177dfcf04bacc1.exe
Files
-
ececb8cf9b9572194d177dfcf04bacc1.exe.exe windows:6 windows x86 arch:x86
3cb339debbcef0f199fcf0a12bdc4eb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
user32
MessageBoxA
Sections
1DfCOeBn Size: - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
FaK3tA7z Size: - Virtual size: 61B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Pu2bwg9C Size: - Virtual size: 13B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
aZdOeeiq Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
a0ScsODS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WiAfNVw3 Size: - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f1bOIp2B Size: - Virtual size: 25B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EOwwQ3de Size: - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VKlBy44g Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vvRv7kGv Size: - Virtual size: 13.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
L7UUwSCy Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TVCBLGWU Size: 17.4MB - Virtual size: 17.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
NiDB8bJ1 Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ