Static task
static1
Behavioral task
behavioral1
Sample
eee3d02d4a9c097b5d1078470ce0c297f5f2a77b0a6004a1eeeb9bffeaeeab27.exe
Resource
win7-20240903-en
General
-
Target
eee3d02d4a9c097b5d1078470ce0c297f5f2a77b0a6004a1eeeb9bffeaeeab27
-
Size
1.8MB
-
MD5
06ad555bc3db6f655cc419789582bcb2
-
SHA1
3f726144d297c8ad14d842ba35616a6e998193a3
-
SHA256
eee3d02d4a9c097b5d1078470ce0c297f5f2a77b0a6004a1eeeb9bffeaeeab27
-
SHA512
c45fd3cf4251e2ef0bc97f92f86943aaf69259432c32b3327b26c7f37d2ab457350bfa61c934eaa6cb8983198bed6e7755268dbe2068c1863f7b403569434cd5
-
SSDEEP
49152:KRT81r8G415gvBlAgizI4kr2kbkEGUNMFEd:KRT8185A+aNMG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource eee3d02d4a9c097b5d1078470ce0c297f5f2a77b0a6004a1eeeb9bffeaeeab27
Files
-
eee3d02d4a9c097b5d1078470ce0c297f5f2a77b0a6004a1eeeb9bffeaeeab27.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vwudgvde Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jsfmchta Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE