Static task
static1
Behavioral task
behavioral1
Sample
ec3b5ff2a8776d113ac2c2b71897104eeda67bd9640eff03122c4d67827e98e6N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec3b5ff2a8776d113ac2c2b71897104eeda67bd9640eff03122c4d67827e98e6N.exe
Resource
win10v2004-20241007-en
General
-
Target
ec3b5ff2a8776d113ac2c2b71897104eeda67bd9640eff03122c4d67827e98e6N.exe
-
Size
71KB
-
MD5
828ad1e119702c22977efde44282f710
-
SHA1
6afa0b1fc303dd9fa3adb3abe8f0e2b260c26bd4
-
SHA256
ec3b5ff2a8776d113ac2c2b71897104eeda67bd9640eff03122c4d67827e98e6
-
SHA512
505a548077a8b448d6844aed687eada747f06e9a2186840e0c798f2498cd949f21fdbd7ed68ba5e53ba50603be7bd8d8674be29236ac0844d2a334832830e242
-
SSDEEP
1536:h20cDC2bLqXC/RUX7lYe+07pt33G0t8EscrwCCPGqn9gc9++ywJBOw9rz6L02rFo:MDxgYetptLzwC3099l7H6g2J5mLle3Ev
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec3b5ff2a8776d113ac2c2b71897104eeda67bd9640eff03122c4d67827e98e6N.exe
Files
-
ec3b5ff2a8776d113ac2c2b71897104eeda67bd9640eff03122c4d67827e98e6N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ