Static task
static1
Behavioral task
behavioral1
Sample
eba0aa6825c4b419e93c2afd5b830f7f2f93dd9e0b78ca3da20b7516a892cadc.exe
Resource
win7-20241010-en
General
-
Target
eba0aa6825c4b419e93c2afd5b830f7f2f93dd9e0b78ca3da20b7516a892cadc.exe
-
Size
1.8MB
-
MD5
d515cfa28f64d47d014a9c796b6fb03e
-
SHA1
0e4d5f44f6a5a78b34d2503db304ea9c8b28d575
-
SHA256
eba0aa6825c4b419e93c2afd5b830f7f2f93dd9e0b78ca3da20b7516a892cadc
-
SHA512
af0d018818c535ad48a6d67ea61e3e894002552594087e35c8a5c9ce515ca283d79dd0af26703992dd83897983b5704f419f3a46065d98277117d16786604664
-
SSDEEP
49152:bl3Z4CRoKSo+7uj2RJ7VVNk1cktO3nTVoZFop:R3ZxRdSn7N5v6iktO3TVoIp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eba0aa6825c4b419e93c2afd5b830f7f2f93dd9e0b78ca3da20b7516a892cadc.exe
Files
-
eba0aa6825c4b419e93c2afd5b830f7f2f93dd9e0b78ca3da20b7516a892cadc.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 153KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dtrvbrez Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mncxnxsc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE