Static task
static1
Behavioral task
behavioral1
Sample
e958c419e50c767eb5eb49bfae25193ee7cc5c92addb2f45834451bb14d805c0.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e958c419e50c767eb5eb49bfae25193ee7cc5c92addb2f45834451bb14d805c0.exe
Resource
win10v2004-20230703-en
General
-
Target
e958c419e50c767eb5eb49bfae25193ee7cc5c92addb2f45834451bb14d805c0
-
Size
560KB
-
MD5
85d493b1b3ba0339d2229d1ed46fdd7e
-
SHA1
408a18bea16ae8489a0370ba286a1ce1311d1d42
-
SHA256
e958c419e50c767eb5eb49bfae25193ee7cc5c92addb2f45834451bb14d805c0
-
SHA512
f55fac3561d7c87991b8dafaff01bdf9b4caa6135aa199b686d59b631d3180b0eab848a9ed481db208130e1af90b92a72b171b9750c54e35d2829868f83e68dd
-
SSDEEP
12288:lKG1p62ncSAN62AX1ff1h/GGk0EsjXhe/1VQTj2aIuuxDmgfHh:lP1Tu6HX59h/GaEsjR41i32aI/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e958c419e50c767eb5eb49bfae25193ee7cc5c92addb2f45834451bb14d805c0
Files
-
e958c419e50c767eb5eb49bfae25193ee7cc5c92addb2f45834451bb14d805c0.exe windows x86
a33a2c0b3abcaaea85fe3ec0441d30d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord3079
ord4080
ord4622
ord4424
ord3738
ord3825
ord815
ord540
ord561
ord825
ord800
ord5856
ord2976
ord3831
ord3830
ord941
ord860
ord5710
ord4204
ord4202
ord535
ord924
ord5572
ord2915
ord2554
ord4486
ord6375
ord3081
ord1576
ord4673
ord4274
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord1168
ord5683
ord858
msvcrt
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
__p__commode
__set_app_type
__p__fmode
_exit
_controlfp
_onexit
__dllonexit
_mbscmp
sprintf
_except_handler3
_XcptFilter
_cexit
_c_exit
_spawnl
strlen
strrchr
__CxxFrameHandler
exit
printf
_setmbcp
memset
kernel32
FormatMessageA
GetLastError
CreateFileA
WriteFile
CloseHandle
DeleteFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetVersionExA
SetCurrentDirectoryA
Sleep
TerminateProcess
WaitForSingleObject
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateSemaphoreA
lstrcpyA
GetSystemDirectoryA
GetTempPathA
LocalFree
CreateDirectoryA
GetStartupInfoA
user32
EnumWindows
GetWindowThreadProcessId
PostMessageA
MessageBoxA
advapi32
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
shell32
SHFileOperationA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 536KB - Virtual size: 535KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pmj Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE