Static task
static1
Behavioral task
behavioral1
Sample
ee9af9daf43c59b0e5c383132625f6cd3e511ee364163cc1c890715d0fad427fN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ee9af9daf43c59b0e5c383132625f6cd3e511ee364163cc1c890715d0fad427fN.exe
Resource
win10v2004-20241007-en
General
-
Target
ee9af9daf43c59b0e5c383132625f6cd3e511ee364163cc1c890715d0fad427fN.exe
-
Size
3KB
-
MD5
b6f003f296e4ccb6c45562d40e575100
-
SHA1
40129f46b2bf3a1130359bf8e9a616b315858ccb
-
SHA256
ee9af9daf43c59b0e5c383132625f6cd3e511ee364163cc1c890715d0fad427f
-
SHA512
23c57538e1b6c7bf641696b0798bde042d08e64478f2ab4833a3cfeecf9f2cd927358a95f47e7935640beeeaebf0cffb621263a3dfa56e58610a2d092a385a80
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee9af9daf43c59b0e5c383132625f6cd3e511ee364163cc1c890715d0fad427fN.exe
Files
-
ee9af9daf43c59b0e5c383132625f6cd3e511ee364163cc1c890715d0fad427fN.exe.exe windows:4 windows x86 arch:x86
b9b860358bb561fbfe75bcb7b279f20d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ntdll
strlen
memset
kernel32
OutputDebugStringA
GetTickCount
VirtualAlloc
OpenProcess
msvcrt
malloc
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 512B - Virtual size: 290B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ