Static task
static1
Behavioral task
behavioral1
Sample
eb4853b83a018da23b4569c66c5f38b1ec8f583a99b6062a5f85fd973facef66.exe
Resource
win7-20240903-en
General
-
Target
eb4853b83a018da23b4569c66c5f38b1ec8f583a99b6062a5f85fd973facef66.exe
-
Size
2.0MB
-
MD5
6aa14cc2311d2309acd1fc0b3b9ea5b2
-
SHA1
6014bbfcc9f4b2a112a9f05c537d162977315a1d
-
SHA256
eb4853b83a018da23b4569c66c5f38b1ec8f583a99b6062a5f85fd973facef66
-
SHA512
66e42028362092f8666e4d0bfdfb3c6328ad18a40eb5270f8718424107ce9946f854eb39fcacee8f466e1fe9e497d17ba6fad82fbeded26033bd425bb38e1539
-
SSDEEP
49152:7Q1axKB61btjUY7GnhEt7gV7CfYApIQnQOj:7Q0o0lt5GnutEVGfYAaQZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource eb4853b83a018da23b4569c66c5f38b1ec8f583a99b6062a5f85fd973facef66.exe
Files
-
eb4853b83a018da23b4569c66c5f38b1ec8f583a99b6062a5f85fd973facef66.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ktelsjbi Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vbhcmfuj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE