Static task
static1
Behavioral task
behavioral1
Sample
ee7f6836ad67dc27a372cd4d3aea7e405b69b820b1c302719b5ac58e9bb63294.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ee7f6836ad67dc27a372cd4d3aea7e405b69b820b1c302719b5ac58e9bb63294.exe
Resource
win10v2004-20240802-en
General
-
Target
ee7f6836ad67dc27a372cd4d3aea7e405b69b820b1c302719b5ac58e9bb63294
-
Size
11.2MB
-
MD5
b707be81d2407a7d26ee05c14e4fb20c
-
SHA1
17e49d080e95eaf775216feeb3cb6c8d0aef20bc
-
SHA256
ee7f6836ad67dc27a372cd4d3aea7e405b69b820b1c302719b5ac58e9bb63294
-
SHA512
be5f0da4e63677dec4902c18017573dbdc28e8a267265e7f2b60049398fd67fb78d0e4bd1272dfab67d5096a518085294e8c096ce7e4bc8b39474bf8a3b11611
-
SSDEEP
196608:hcMzmyILN7gi6/CmPDfCxZRd6qI7J4s+5Q53eg0LEJVhsc1KVNDqC4Cy:hcjpP6/CmW/RdPGJ4hQrVD1WNQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee7f6836ad67dc27a372cd4d3aea7e405b69b820b1c302719b5ac58e9bb63294
Files
-
ee7f6836ad67dc27a372cd4d3aea7e405b69b820b1c302719b5ac58e9bb63294.exe windows:6 windows x64 arch:x64
02ce76e7908255d5572189872c25cc54
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetCurrentProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
advapi32
AdjustTokenPrivileges
Sections
.text Size: - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CK( Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.q/g Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.P!} Size: 11.2MB - Virtual size: 11.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ