Static task
static1
Behavioral task
behavioral1
Sample
ee513fe6f95abfe75673b503ee2ffacf6143b5bb63b63c066a455931bdf974bb.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ee513fe6f95abfe75673b503ee2ffacf6143b5bb63b63c066a455931bdf974bb.exe
Resource
win10v2004-20230915-en
General
-
Target
ee513fe6f95abfe75673b503ee2ffacf6143b5bb63b63c066a455931bdf974bb
-
Size
6.5MB
-
MD5
5995abe4cc535ee7e3f1da0d22c5ac55
-
SHA1
9bc65d6dc9782e37bd35d00698fa4db8c0029d7b
-
SHA256
ee513fe6f95abfe75673b503ee2ffacf6143b5bb63b63c066a455931bdf974bb
-
SHA512
12ec4bbce8c5fb166cc0a0f42d165049c0b39569de5b6fb867d38b705a671f3486aa6a3e062face2a47f2b5fc0d183227908070937e5d76c83be31f94fee497c
-
SSDEEP
196608:quvuqG5jxsZ8ggHqVVKmb4MmQrn6O0HkGs:quuF5FHqVMm0tQ7qEGs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee513fe6f95abfe75673b503ee2ffacf6143b5bb63b63c066a455931bdf974bb
Files
-
ee513fe6f95abfe75673b503ee2ffacf6143b5bb63b63c066a455931bdf974bb.exe windows:5 windows x86
ae4c83ea58f1a6b13bb69b2339d62d5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
OpenProcessToken
atl
ord42
comctl32
InitCommonControlsEx
crypt32
CryptStringToBinaryA
gdi32
DeleteDC
gdiplus
GdipSetClipGraphics
msimg32
AlphaBlend
msvcrt
_stricmp
ole32
CoUninitialize
oleaut32
VariantTimeToSystemTime
shell32
SHGetSpecialFolderPathA
shlwapi
PathFileExistsA
user32
PeekMessageA
winhttp
WinHttpSendRequest
Sections
Svmp3 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Svmp3 Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Svmp3 Size: - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Svmp3 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Svmp3 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Svmp3 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Svmp3 Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Svmp3 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Svmp3 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Svmp3 Size: 547KB - Virtual size: 546KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Svmp3 Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ