Static task
static1
Behavioral task
behavioral1
Sample
e2535ab2633c64df4a060630285d3e4838f3d6ae0014c85a8656a79cd8c5cb11.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e2535ab2633c64df4a060630285d3e4838f3d6ae0014c85a8656a79cd8c5cb11.exe
Resource
win10v2004-20230703-en
General
-
Target
e2535ab2633c64df4a060630285d3e4838f3d6ae0014c85a8656a79cd8c5cb11
-
Size
1.4MB
-
MD5
eea7e8980770d81f890b8ac30d8338e2
-
SHA1
b40f87e8ccaba6b644d33049da0bee0a2f71ca07
-
SHA256
e2535ab2633c64df4a060630285d3e4838f3d6ae0014c85a8656a79cd8c5cb11
-
SHA512
84187a6be84a70e906e16e0c7dbf3093fd84dd329ef882739ddc3fe87097cff0979c586c06465dc6230c9cc972db1809701b55e6403b6fd76bdb578ed4c0b304
-
SSDEEP
24576:0krwzop11YC7uvYWTsP1kpVRH/8zenc5qxC0CN0AXlaGXivjc4fIPAxvOJ64kfmH:bruo2C7uwWTsP1kpVRf8zenC+gdXOVxI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2535ab2633c64df4a060630285d3e4838f3d6ae0014c85a8656a79cd8c5cb11
Files
-
e2535ab2633c64df4a060630285d3e4838f3d6ae0014c85a8656a79cd8c5cb11.exe windows x86
ae5d13c1ccd25e7ec5d92c5bf9ede33e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
select
kernel32
EnterCriticalSection
user32
CloseClipboard
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 400KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 976KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ