Static task
static1
Behavioral task
behavioral1
Sample
ec9e30b1ba29e21f37aa0a5c6d85fd31306bfab80527b74d9a246aabb218bc05N.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
ec9e30b1ba29e21f37aa0a5c6d85fd31306bfab80527b74d9a246aabb218bc05N.exe
Resource
win10v2004-20241007-en
General
-
Target
ec9e30b1ba29e21f37aa0a5c6d85fd31306bfab80527b74d9a246aabb218bc05N.exe
-
Size
1.9MB
-
MD5
223e24da769c85a796a8699e59ea0230
-
SHA1
a4d481a01f238156f685f43ffbe5729671c195a6
-
SHA256
ec9e30b1ba29e21f37aa0a5c6d85fd31306bfab80527b74d9a246aabb218bc05
-
SHA512
379659631608fad8ef8e343acf39396c4f0841fa92b4613be707155ac96f1129b4343e14477e88578f1e716a9f4130da91cc0d51d5b22603ead9ff917d3703fc
-
SSDEEP
49152:QfVl2iMzzVhHVsX0NLFtP6O83XxPR7FIYNMIc8qH3Lc:qlezzV1VsXyLFtP61HxzIYNM7JA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ec9e30b1ba29e21f37aa0a5c6d85fd31306bfab80527b74d9a246aabb218bc05N.exe
Files
-
ec9e30b1ba29e21f37aa0a5c6d85fd31306bfab80527b74d9a246aabb218bc05N.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 57KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fzlokrxn Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pruxdgdq Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE