EjoK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
05686f0f36d10b7c3056592eba7b16959f1940268ca9979c2312c50b8a73e045.exe
Resource
win7-20240708-en
General
-
Target
05686f0f36d10b7c3056592eba7b16959f1940268ca9979c2312c50b8a73e045.exe
-
Size
655KB
-
MD5
bfe4949eae3957221a1762bf563e5fbc
-
SHA1
56b362821de9f80cdcafcfb7f10a5728a55a1ee3
-
SHA256
05686f0f36d10b7c3056592eba7b16959f1940268ca9979c2312c50b8a73e045
-
SHA512
f8e9e8a1f62aac6383d302ec86675c3acd3a5e0dbbe2aae00a9545eb73d1c8d40806c9d0afac825a7aee3bc0b35a3ec0766e564565759670fc39abda99cde5b7
-
SSDEEP
12288:wV1o7m8OP6he57NiUokKZD0VQ2ErB3utA8hclbUoRp3D1vYd1E6:wHo7CPXpikKNKQjrB3S1hclYoRp3xvYf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 05686f0f36d10b7c3056592eba7b16959f1940268ca9979c2312c50b8a73e045.exe
Files
-
05686f0f36d10b7c3056592eba7b16959f1940268ca9979c2312c50b8a73e045.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 652KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ