Static task
static1
Behavioral task
behavioral1
Sample
ec04fbfddf968df86e0d0e0c0943bf3bb32a70b4fbb7280519a2f73d448fdc96.exe
Resource
win7-20241010-en
General
-
Target
ec04fbfddf968df86e0d0e0c0943bf3bb32a70b4fbb7280519a2f73d448fdc96.exe
-
Size
4.2MB
-
MD5
08305ea461f669a3cec283e3b3109d49
-
SHA1
be401743abb7a28ba167e612af473aca20ae333a
-
SHA256
ec04fbfddf968df86e0d0e0c0943bf3bb32a70b4fbb7280519a2f73d448fdc96
-
SHA512
76c35c666c6b5cecf474af20ef20a0527e663871c1b61092f0eabcc90a6c2ac8c93b88c12ef609a79a65193259128809c2173d6ed7113b6f71cda1df0a9f919c
-
SSDEEP
98304:YypF16ldZYgLGY5O5cAkeiAHOGOnpr7Qqm6+igkcKC:xahGK6fkeJOFBQo+XkY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ec04fbfddf968df86e0d0e0c0943bf3bb32a70b4fbb7280519a2f73d448fdc96.exe
Files
-
ec04fbfddf968df86e0d0e0c0943bf3bb32a70b4fbb7280519a2f73d448fdc96.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nrjgkxbg Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pmxczwnp Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE