tEaO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c387b91dd56a4b66da4582e26ebc0c5a473e37251fb44650fc62d6d4749d5c8c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c387b91dd56a4b66da4582e26ebc0c5a473e37251fb44650fc62d6d4749d5c8c.exe
Resource
win10v2004-20240802-en
General
-
Target
c387b91dd56a4b66da4582e26ebc0c5a473e37251fb44650fc62d6d4749d5c8c.exe
-
Size
864KB
-
MD5
1a2030277b88a72feac4f57f6514494a
-
SHA1
29858e377f52ba70fad5d3f24c30e2264d96ea96
-
SHA256
c387b91dd56a4b66da4582e26ebc0c5a473e37251fb44650fc62d6d4749d5c8c
-
SHA512
15fb1909628f42b05fb23c3d1a492ffd7a1897c63ef1b9d9380c1026b5a02c661cd5ab94d6d56d5d1f942c9172c34de11717bf21650981b7cff788437981ca63
-
SSDEEP
12288:zTvI+u/WO2QaanbotSUN3o7ifGY4+wZy2jifuNHXSRcEgPKxIYzsT:3vIFSYgp32872lWWtSBgmIYzs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c387b91dd56a4b66da4582e26ebc0c5a473e37251fb44650fc62d6d4749d5c8c.exe
Files
-
c387b91dd56a4b66da4582e26ebc0c5a473e37251fb44650fc62d6d4749d5c8c.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 861KB - Virtual size: 860KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ