Static task
static1
Behavioral task
behavioral1
Sample
e91236dbc7e72ad1ad2dee71cdc90a012de5189e21aab743966c77cc61b9e770.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e91236dbc7e72ad1ad2dee71cdc90a012de5189e21aab743966c77cc61b9e770.exe
Resource
win10v2004-20230703-en
General
-
Target
e91236dbc7e72ad1ad2dee71cdc90a012de5189e21aab743966c77cc61b9e770
-
Size
444KB
-
MD5
6f1525f32f3c9535cccad0a1e39b13c1
-
SHA1
fbc9740a84f1077417fa0cef55af0ab1de5080a8
-
SHA256
e91236dbc7e72ad1ad2dee71cdc90a012de5189e21aab743966c77cc61b9e770
-
SHA512
539f173caf8892eb843bdb6bc4ada14e1c198b228cdadf528c06d91031056b99d80a52cf1f2d6b6753195ef3680878a4c8e3ddc1333c0c4902d9663994ddc52b
-
SSDEEP
6144:jTUVEeqrNJ/wMjkQeCLbamE95OqjE5xPEQij60X0UBUaNtB:jT1rNJ4MjmMGjoxPLimSUal
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e91236dbc7e72ad1ad2dee71cdc90a012de5189e21aab743966c77cc61b9e770
Files
-
e91236dbc7e72ad1ad2dee71cdc90a012de5189e21aab743966c77cc61b9e770.exe windows x86
ac74fd6be20484165aacf77466ebc433
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFlags
GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetLocaleInfoA
GetCPInfo
GetOEMCP
FlushFileBuffers
SetEndOfFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
HeapSize
ExitProcess
HeapDestroy
HeapCreate
GetStdHandle
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
GetACP
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
GetCurrentThreadId
lstrcmpA
GlobalGetAtomNameA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
GetCurrentProcess
SetFileAttributesA
TerminateProcess
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileInformationByHandle
GetFileSize
GetLocalTime
FileTimeToSystemTime
WriteFile
SetFileTime
LocalFileTimeToFileTime
GetCurrentDirectoryA
CreateDirectoryA
ReadFile
CloseHandle
CreateFileA
SystemTimeToFileTime
SetFilePointer
GetTickCount
Sleep
GetSystemTimeAsFileTime
GetSystemInfo
HeapAlloc
GetThreadLocale
GetProcessHeap
HeapFree
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualFree
VirtualAlloc
IsBadReadPtr
SetLastError
VirtualProtect
MoveFileA
GetModuleFileNameA
DeleteFileA
RemoveDirectoryA
GetFileAttributesA
CopyFileA
FindFirstFileA
FindNextFileA
FindClose
CreateFileW
GetEnvironmentVariableA
lstrlenA
CompareStringA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
user32
GetClientRect
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowPos
SetWindowLongA
IsWindow
GetDlgItem
GetFocus
GetWindow
GetDlgCtrlID
GetClassNameA
PtInRect
SetWindowTextA
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
GetKeyState
PeekMessageA
ValidateRect
GetWindowTextA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
PostQuitMessage
DestroyMenu
MessageBoxA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetWindowRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ClientToScreen
SetForegroundWindow
gdi32
SetMapMode
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
SetViewportExtEx
GetDeviceCaps
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 308KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ