@new.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ea5d42beb9693c39239f8cd6475af0e9.exe
Resource
win7-20240729-en
General
-
Target
d24a20267fa5f97927358bdb6a5b6776492d35b2b67a89858425c654fe84d5f8
-
Size
480KB
-
MD5
9c4939cef0b23ff82a57e9110b88e7c4
-
SHA1
91ceeff3e8daa40eed2124ebc12eb982fd7209fa
-
SHA256
d24a20267fa5f97927358bdb6a5b6776492d35b2b67a89858425c654fe84d5f8
-
SHA512
753a09158d2e66aedae2f03f0df27a1c6a2f8f4d8a233fb6e046311dd58dd12f11ac59e776c5369e0d65696bd683f3e4430b6c8322db07eb5dd02db3391f2503
-
SSDEEP
12288:M6cDxGygQMDtcd2T0ABjCcSe1EcBHtiKO3J6Qledt9+PdOJnzn:EGD+8TtBjCcSedVxd79Kczn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ea5d42beb9693c39239f8cd6475af0e9
Files
-
d24a20267fa5f97927358bdb6a5b6776492d35b2b67a89858425c654fe84d5f8.zip
Password: infected
-
ea5d42beb9693c39239f8cd6475af0e9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 528KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ