Static task
static1
Behavioral task
behavioral1
Sample
e2bb9b22b4c03c90e6e2794a60b7aa19e4070787d557263b8aaf47a24f5db1d1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e2bb9b22b4c03c90e6e2794a60b7aa19e4070787d557263b8aaf47a24f5db1d1.exe
Resource
win10v2004-20230915-en
General
-
Target
e2bb9b22b4c03c90e6e2794a60b7aa19e4070787d557263b8aaf47a24f5db1d1
-
Size
12.8MB
-
MD5
7ddbb1c76626eade2b3f638d1aab2dc9
-
SHA1
43f04a4255f8c29c7eb3f36aa31941f9759bf1b6
-
SHA256
e2bb9b22b4c03c90e6e2794a60b7aa19e4070787d557263b8aaf47a24f5db1d1
-
SHA512
8a9164da0d4506d34eec307222945f08938c6515981407a00f883ebeef4dc3d7c24e6e00df88b0d07d779daa070fe272b6c2e28f9d22ec7dc7f8bac980682df8
-
SSDEEP
393216:Bne4qw1SOIn57MD7JHP+mccfAZvpJl+D:Ne4qhOIn5uNHP+mccfAhHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2bb9b22b4c03c90e6e2794a60b7aa19e4070787d557263b8aaf47a24f5db1d1
Files
-
e2bb9b22b4c03c90e6e2794a60b7aa19e4070787d557263b8aaf47a24f5db1d1.exe windows:4 windows x86
3288ee3bc3aba090242c0b1b4ea8a155
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamClose
ws2_32
ntohl
kernel32
SetLastError
user32
ScrollWindowEx
gdi32
PatBlt
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
SHBrowseForFolderA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
Sections
.text Size: - Virtual size: 769KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 417KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 10KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 400KB - Virtual size: 399KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE