Static task
static1
Behavioral task
behavioral1
Sample
e4e84cea1a48b2c1fd764123283467ebe168da757c90af4a4d0506230153af47.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e4e84cea1a48b2c1fd764123283467ebe168da757c90af4a4d0506230153af47.exe
Resource
win10v2004-20230703-en
General
-
Target
e4e84cea1a48b2c1fd764123283467ebe168da757c90af4a4d0506230153af47
-
Size
2.8MB
-
MD5
f5de44a67881a1f98ffe31b1a3316a64
-
SHA1
6337819f906a2f07b2a08ec791c39a3b1a3782aa
-
SHA256
e4e84cea1a48b2c1fd764123283467ebe168da757c90af4a4d0506230153af47
-
SHA512
06a3600d13cdd4a13e63c62572e7ec5974f3a56b6a35e2179c75c785b00f73f12e848d6fe00e030372102efe4a7a80de0f4a92f7c1c16023ceea3ce1cafe6200
-
SSDEEP
49152:pHYrUCv4yyouO6ur19qfhSvi7oCQ48WQxWuJT90ScCR:J4Uy4yytO6ur8YvuoCQ4YxR9hR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4e84cea1a48b2c1fd764123283467ebe168da757c90af4a4d0506230153af47
Files
-
e4e84cea1a48b2c1fd764123283467ebe168da757c90af4a4d0506230153af47.exe windows x86
7ad52fdf433f1062e2a204da918d18ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
GetUserDefaultLCID
user32
MessageBoxA
SetWindowTextA
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamOut
ws2_32
recvfrom
rasapi32
RasHangUpA
gdi32
ExtSelectClipRgn
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetSaveFileNameA
advapi32
RegCloseKey
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_DrawIndirect
wldap32
ord29
wininet
InternetCloseHandle
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ