Static task
static1
Behavioral task
behavioral1
Sample
eb97f3a1f177ad25b5fe62bd6df758097c861fb96dcf71fcf07ed442ccafc72d.exe
Resource
win7-20241010-en
General
-
Target
eb97f3a1f177ad25b5fe62bd6df758097c861fb96dcf71fcf07ed442ccafc72d
-
Size
1.8MB
-
MD5
bb16c16346f28b7ba4b57d5f04445e7e
-
SHA1
5d7b0f8e6d57a3f00f65f45a50131038c540b0f1
-
SHA256
eb97f3a1f177ad25b5fe62bd6df758097c861fb96dcf71fcf07ed442ccafc72d
-
SHA512
29f1f07360d4e241a7782845dd12c1d1d5cc0584e6869e292ab19677619ecdb33455aecbb93e3cfd6da634c09ed7ca4835fba9bd6ab3674a4e94eb19f0a5988c
-
SSDEEP
49152:ZX2pj6VuFSOEGlFK7uFOSNcw4jdXvx9cEM4:ZXO6wAOpWoc//x1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb97f3a1f177ad25b5fe62bd6df758097c861fb96dcf71fcf07ed442ccafc72d
Files
-
eb97f3a1f177ad25b5fe62bd6df758097c861fb96dcf71fcf07ed442ccafc72d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rxvefvtg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mhzldzfs Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE