Static task
static1
Behavioral task
behavioral1
Sample
e86000cdf1baa34fe64a222b04a30f844641e8b0c4d4b607bce0b604549449f6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e86000cdf1baa34fe64a222b04a30f844641e8b0c4d4b607bce0b604549449f6.exe
Resource
win10v2004-20230703-en
General
-
Target
e86000cdf1baa34fe64a222b04a30f844641e8b0c4d4b607bce0b604549449f6
-
Size
4.6MB
-
MD5
8be09f12aaa97d591989312bc6826dce
-
SHA1
d0756baea0154120d76498f1bdf485e0c9300820
-
SHA256
e86000cdf1baa34fe64a222b04a30f844641e8b0c4d4b607bce0b604549449f6
-
SHA512
b8ac9f9bf128eea0cf9619bfff7ee4a7f49e6f530de71f69caaf05e7fc6b394038d089a1bf7680d94e7cecf673d8899849f540ec125f420b7afb2d670a56b4bc
-
SSDEEP
98304:dnGSjpO1d9Ya+cpWUA1+B7UuVl3hev+QzWE2NyxVGJ:8SjpafH+cl4K7xVDev+lMHG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e86000cdf1baa34fe64a222b04a30f844641e8b0c4d4b607bce0b604549449f6
Files
-
e86000cdf1baa34fe64a222b04a30f844641e8b0c4d4b607bce0b604549449f6.exe windows x86
6e354a4c74f34db5722d640d72a0fdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsA
winmm
midiStreamOut
ws2_32
socket
rasapi32
RasHangUpA
kernel32
CreateSemaphoreA
user32
GetActiveWindow
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_GetIcon
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 3.1MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ