OJqB.pdb
Static task
static1
General
-
Target
ecome.exe
-
Size
1.1MB
-
MD5
387a4f5a3791b3467434add8798e156c
-
SHA1
3eb4d42ca10ca4705bd8e6411e09b31b8f04914e
-
SHA256
0ccf18985ae70f2004c2ccc11f470b7bbd0884fce623a606a67b2e4e66916791
-
SHA512
7ad99b695ca917759de3bb75bc1f449f80b6b8d44b081b2036e4824a82847df4990c21862b49c71da79d3d4c3e115bcb3edea8b10e7a445be66dfa8da9cb1eff
-
SSDEEP
24576:lPSbyKdceodVn4sgUmwzzjKsjOxXVsCdPd+p:JgxebtgIznKaKsCdPsp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecome.exe
Files
-
ecome.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ