Static task
static1
Behavioral task
behavioral1
Sample
ebd59c645bef1e0399eb45f705c5ab45b2b008741aeaf77c70ac475a0f6c3807N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebd59c645bef1e0399eb45f705c5ab45b2b008741aeaf77c70ac475a0f6c3807N.exe
Resource
win10v2004-20241007-en
General
-
Target
ebd59c645bef1e0399eb45f705c5ab45b2b008741aeaf77c70ac475a0f6c3807N
-
Size
370KB
-
MD5
d8bc1912e1f016c7d777b9e025862020
-
SHA1
054cb167e2f2d8f5b18dfa45af224db3f9cb8b06
-
SHA256
ebd59c645bef1e0399eb45f705c5ab45b2b008741aeaf77c70ac475a0f6c3807
-
SHA512
bc09c87c8d2e5e11b6a7c06262f38f3da09ae03b79cfe770cfe4eac309528826b480b9c4bdb9081e6395b41ed19de643cb30a49157e8e2334d3e40402b5ee33c
-
SSDEEP
6144:zJFzjKA8e+9pyvmX+XqERA45Y0bJEm+Gbp5XTBlwMSbe9tJVF4nML82CuBWMoY8R:zJFKXyvba0JDNEm/5jBlG+7MMLjCgWvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebd59c645bef1e0399eb45f705c5ab45b2b008741aeaf77c70ac475a0f6c3807N
Files
-
ebd59c645bef1e0399eb45f705c5ab45b2b008741aeaf77c70ac475a0f6c3807N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ