Static task
static1
Behavioral task
behavioral1
Sample
e0dae8a79c33af0f2d6d9fc520ece9d921ab59a20f6573ea5d3e7e9da807c380.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e0dae8a79c33af0f2d6d9fc520ece9d921ab59a20f6573ea5d3e7e9da807c380.exe
Resource
win10v2004-20230915-en
General
-
Target
e0dae8a79c33af0f2d6d9fc520ece9d921ab59a20f6573ea5d3e7e9da807c380
-
Size
840KB
-
MD5
cf60a5c045f8c462c220d3aebcfc2bcb
-
SHA1
d714f9d0dca37a6332bb9d3c8a2e0b64da02c36a
-
SHA256
e0dae8a79c33af0f2d6d9fc520ece9d921ab59a20f6573ea5d3e7e9da807c380
-
SHA512
4ea7d003431f3d92f7f144f5a66032c089ffda9ceb4e4afa8da575c1491a6e1df06b492aefb9855469698a1e3aa16b525fbb2af55d6b1f0cfc2db64248314c9c
-
SSDEEP
12288:+EPZKgJ777SzB/6G/3eMygDAQOc25Cnh0nnC/IYy5ZM+UAt6jC3Qms:xRFUB7/3eMVAV6H3qiln
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0dae8a79c33af0f2d6d9fc520ece9d921ab59a20f6573ea5d3e7e9da807c380
Files
-
e0dae8a79c33af0f2d6d9fc520ece9d921ab59a20f6573ea5d3e7e9da807c380.exe windows x86
c412bc3d208971e1f9fcc4ea1156b47a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
CloseHandle
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
CopyFileW
libcrypto-1_1
RSA_public_decrypt
msvcp120d
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
msvcr120d
wcslen
mfc120ud
ord532
user32
ShowWindow
gdi32
SetBkMode
advapi32
RegCloseKey
shell32
SHBrowseForFolderW
comctl32
ord17
winhttp
WinHttpQueryDataAvailable
ole32
OleLockRunning
oleaut32
SysAllocString
winmm
PlaySoundW
libcompact
load
Sections
.text Size: - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vdata Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
..idata Size: - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 447KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 335KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ