Static task
static1
Behavioral task
behavioral1
Sample
e4c0354dc846d8c92446e2b02c4fe04ffea9ab9a6a349d29c5dadaaff93bbca3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e4c0354dc846d8c92446e2b02c4fe04ffea9ab9a6a349d29c5dadaaff93bbca3.exe
Resource
win10v2004-20230221-en
General
-
Target
e4c0354dc846d8c92446e2b02c4fe04ffea9ab9a6a349d29c5dadaaff93bbca3
-
Size
1.4MB
-
MD5
3a65a4c9a38eed6ea0684d2b6106aa2f
-
SHA1
299e3cbef14f51d0f69c18c67a626cbdac56c295
-
SHA256
e4c0354dc846d8c92446e2b02c4fe04ffea9ab9a6a349d29c5dadaaff93bbca3
-
SHA512
75597fc2cd5e46bb0ef8dce64b6cebac03291bf7d090adeffd2f3d2b336a503929cccc5ba45a6e9e12a12570542fbc855feb3d0744e00c126ac145c6141548bc
-
SSDEEP
24576:9aI8psIn/MMuiHOBrAodqzQoqLSFao3j7aLgzcwD2KtLrNQUV1Tw:9aIEsMlzBQo9FaijZDjrNXV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4c0354dc846d8c92446e2b02c4fe04ffea9ab9a6a349d29c5dadaaff93bbca3
Files
-
e4c0354dc846d8c92446e2b02c4fe04ffea9ab9a6a349d29c5dadaaff93bbca3.exe windows x86
9f2fd7c946046bfd2f071b649d545446
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
opengl32
wglMakeCurrent
gdi32
UnrealizeObject
version
VerQueryValueA
mpr
WNetGetConnectionA
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
urlmon
CoInternetCreateZoneManager
wininet
InternetCheckConnectionA
shell32
Shell_NotifyIconA
winspool.drv
OpenPrinterA
comdlg32
GetSaveFileNameA
oleacc
LresultFromObject
winmm
sndPlaySoundA
wsock32
WSACleanup
glu32
gluSphere
Sections
.text Size: 1.4MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE