Static task
static1
Behavioral task
behavioral1
Sample
e1c06df877f088784e0503d3753fb8f384aeab7d86a1e6a738cc0a4a49651b17.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e1c06df877f088784e0503d3753fb8f384aeab7d86a1e6a738cc0a4a49651b17.exe
Resource
win10v2004-20230915-en
General
-
Target
e1c06df877f088784e0503d3753fb8f384aeab7d86a1e6a738cc0a4a49651b17
-
Size
976KB
-
MD5
e24362af2ce776f18d8435d46d2dc744
-
SHA1
48733a2bf5e149bea0a627e3149535c51c7a3df9
-
SHA256
e1c06df877f088784e0503d3753fb8f384aeab7d86a1e6a738cc0a4a49651b17
-
SHA512
a5a893787f60d3333b773c51f971415ae20ea1e469ae1d2c3b2fb5c53ffefcb8230f7c1f812c6ed290d12cd6df4f5063d0160d1247c2f0246de1c88692a2d04f
-
SSDEEP
24576:cqLh+Exkcgk52PtF2wTEibYHeXkp7V90XSkwid7ZTzG5TC:c+++k9PPhbYplbAOT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1c06df877f088784e0503d3753fb8f384aeab7d86a1e6a738cc0a4a49651b17
Files
-
e1c06df877f088784e0503d3753fb8f384aeab7d86a1e6a738cc0a4a49651b17.exe windows:4 windows x86
cb1711c1ca5b72c27ba282a3a1045de4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
VirtualAlloc
GetSystemInfo
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
RaiseException
GetLastError
TerminateProcess
OpenProcess
Process32Next
Module32First
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetModuleFileNameA
CloseHandle
MapViewOfFile
OpenFileMappingA
HeapFree
HeapAlloc
GetProcessHeap
GetProcAddress
ReadFile
SetFilePointer
GetFileSize
UnmapViewOfFile
CreateFileMappingA
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetTickCount
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
FlushFileBuffers
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsBadWritePtr
HeapCreate
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetCurrentProcess
ExitProcess
RtlUnwind
HeapSize
HeapDestroy
VirtualProtect
CreateFileA
VirtualFree
user32
SetTimer
DefWindowProcA
PostQuitMessage
KillTimer
CreateWindowExA
LoadCursorA
RegisterClassExA
IsWindow
LoadIconA
RegisterClassA
GetClassNameA
UnregisterClassA
CopyRect
GetClientRect
GetWindowLongA
SetWindowLongA
UpdateWindow
SetWindowPos
SetWindowTextA
PostMessageA
GetWindowRect
MoveWindow
EqualRect
BeginPaint
EndPaint
LockWindowUpdate
RedrawWindow
IsIconic
SetForegroundWindow
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
InvalidateRect
ReleaseDC
GetDC
SetFocus
GetFocus
SetCapture
ReleaseCapture
ShowWindow
gdi32
GetDeviceCaps
GetStockObject
shell32
ShellExecuteA
ole32
CoInitialize
CoUninitialize
CoGetMalloc
oleaut32
SysAllocStringLen
SysFreeString
SysAllocString
VariantClear
urlmon
CreateURLMoniker
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 856KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE