Static task
static1
Behavioral task
behavioral1
Sample
ea8bd049f03b20e56a23d53e57130e120f712eeb7c9cc26dcc9f955f60e572a8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ea8bd049f03b20e56a23d53e57130e120f712eeb7c9cc26dcc9f955f60e572a8.exe
Resource
win10v2004-20230915-en
General
-
Target
ea8bd049f03b20e56a23d53e57130e120f712eeb7c9cc26dcc9f955f60e572a8
-
Size
15.9MB
-
MD5
fdd00c7828f033800d7ac08fb7e442b1
-
SHA1
fb8a325fa765af153c27889e13118e23f19b19fe
-
SHA256
ea8bd049f03b20e56a23d53e57130e120f712eeb7c9cc26dcc9f955f60e572a8
-
SHA512
a86f3857c66b73f6348a432f6e5c8a45bbdc20077470ae18748f4bb0d0f8a4479a6bf9034b162cca66cfb50b5dfcf9565930286f5155fb908bc4c66cb6e982de
-
SSDEEP
196608:0EQi0mAiG0VvRYi/B1U5rBNftFLf3rRu/Ofvu91Iq+YJO1icqvdusV4fLFI9KBKy:HQi++B+ftBR/23+YJJ0sV+LrT1Q8+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea8bd049f03b20e56a23d53e57130e120f712eeb7c9cc26dcc9f955f60e572a8
Files
-
ea8bd049f03b20e56a23d53e57130e120f712eeb7c9cc26dcc9f955f60e572a8.exe windows:5 windows x86
942e021c70259b4c74f4b42fc8a5139b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
wsprintfA
gdi32
LineTo
winmm
midiStreamClose
winspool.drv
ClosePrinter
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
RegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
WSAAsyncSelect
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 837KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15.5MB - Virtual size: 15.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ