Static task
static1
Behavioral task
behavioral1
Sample
eef6f662085c73ec71cd0f24556290f0N.exe
Resource
win7-20240903-en
General
-
Target
eef6f662085c73ec71cd0f24556290f0N
-
Size
324KB
-
MD5
eef6f662085c73ec71cd0f24556290f0
-
SHA1
e30e15b5e1ebc226bd5dbe7dcf4a1e460dffa854
-
SHA256
80efd692edbc0a8f682587a83de283291c5be858e6e5c6e6d6a9fc07e76823df
-
SHA512
04a9d9ae29216007cbbf1335b17fc21d677300b32b29a338ce60051cd69b43a5f1f2e0d87fe21157c5b33ee968dec90dd852ef3b8ae5394189a161e8a19aed4b
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYX:vHW138/iXWlK885rKlGSekcj66ciO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eef6f662085c73ec71cd0f24556290f0N
Files
-
eef6f662085c73ec71cd0f24556290f0N.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 301KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE