Static task
static1
Behavioral task
behavioral1
Sample
ec05a90b885f1c109c76ee81f0e67b0401ac2ebf65e60c3750604bfbe78849b6.exe
Resource
win7-20240903-en
General
-
Target
ec05a90b885f1c109c76ee81f0e67b0401ac2ebf65e60c3750604bfbe78849b6
-
Size
3.1MB
-
MD5
00d7afcfd2a0d73e97bae5eb53759e20
-
SHA1
98709da0be5821ed926a91dbf150be86096dbd31
-
SHA256
ec05a90b885f1c109c76ee81f0e67b0401ac2ebf65e60c3750604bfbe78849b6
-
SHA512
cc5c642e9be05af13b7be6f0d7532b3d8f3c80f8cc07d2bd73546e59707d3127d6f0f5c4c6b40c21460f5fa01e5ce890af375474b59ee3aa61a1288445dcbbf2
-
SSDEEP
49152:Xzaozin2JQXMQ4utxrM2K20bZVel4fh15hefZnml:1in2JQXV4utZM2K20fel4515wfZml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec05a90b885f1c109c76ee81f0e67b0401ac2ebf65e60c3750604bfbe78849b6
Files
-
ec05a90b885f1c109c76ee81f0e67b0401ac2ebf65e60c3750604bfbe78849b6.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
woleviox Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ashbmvjq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE