Static task
static1
Behavioral task
behavioral1
Sample
ee977976bb2273039927c216933a463dbb10ff6ef85fd76b85717925ec2a9654.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ee977976bb2273039927c216933a463dbb10ff6ef85fd76b85717925ec2a9654.exe
Resource
win10v2004-20240802-en
General
-
Target
ee977976bb2273039927c216933a463dbb10ff6ef85fd76b85717925ec2a9654
-
Size
4.4MB
-
MD5
895d67e1d762092aa76416ee00446b3a
-
SHA1
b27fee78705198d7bb3d768100ec258936fb573c
-
SHA256
ee977976bb2273039927c216933a463dbb10ff6ef85fd76b85717925ec2a9654
-
SHA512
c476bf8b50b39b80fe2522e660cf71b9f9c99f2aa862320f7e462ead5b6177c5d7b7a9e8844fdc7f48d0a9d008553997bdd61dd75883c1715a1672fe662d7f40
-
SSDEEP
98304:+w+TV7BdBdxr0W19uuWe3I36lxyf/Gw+3WaFXjFnkQM9yXpEgcs:c7NXr0WLlqG9GaDn/q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee977976bb2273039927c216933a463dbb10ff6ef85fd76b85717925ec2a9654
Files
-
ee977976bb2273039927c216933a463dbb10ff6ef85fd76b85717925ec2a9654.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 6.3MB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ