Static task
static1
Behavioral task
behavioral1
Sample
ebf676a26fbdaf7dda5cf703aca26d27cfb48791575c8b6f21eb5108479f8cb1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebf676a26fbdaf7dda5cf703aca26d27cfb48791575c8b6f21eb5108479f8cb1.exe
Resource
win10v2004-20240802-en
General
-
Target
ebf676a26fbdaf7dda5cf703aca26d27cfb48791575c8b6f21eb5108479f8cb1.exe
-
Size
704KB
-
MD5
f1d1cee200ee8cd6a99fa50c0d1284e2
-
SHA1
7c5bf57912bab0ce508f7d4ad2ba9569ea57ccdd
-
SHA256
ebf676a26fbdaf7dda5cf703aca26d27cfb48791575c8b6f21eb5108479f8cb1
-
SHA512
ca3b78cbc0d2342ee5e0d5a4276a9d31c3e35816201c4d699dc74b8d51cf0e0f50e570927df3fc4d8026e5768b8149aa32ff4db73985132ed9516ead0a7d00ea
-
SSDEEP
12288:lAL8qk+ACsSM2/1MrGPKD8wBGa4OocRTYxuqq7gJ+HZZhks5xXoavjohAn+NG+/t:aL8q9YiMrGPKDAgk5eWSK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebf676a26fbdaf7dda5cf703aca26d27cfb48791575c8b6f21eb5108479f8cb1.exe
Files
-
ebf676a26fbdaf7dda5cf703aca26d27cfb48791575c8b6f21eb5108479f8cb1.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 701KB - Virtual size: 701KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ