Static task
static1
Behavioral task
behavioral1
Sample
e8400d80250d8d44b4a7c6f86dbd962a1d232f5a0627428fe379c14694bcdeaf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e8400d80250d8d44b4a7c6f86dbd962a1d232f5a0627428fe379c14694bcdeaf.exe
Resource
win10v2004-20230915-en
General
-
Target
e8400d80250d8d44b4a7c6f86dbd962a1d232f5a0627428fe379c14694bcdeaf
-
Size
13.0MB
-
MD5
eb6bcf83e9e68aac1322df332a435065
-
SHA1
a7e82e5d6e827c0fce007a7dc63426c261c4d655
-
SHA256
e8400d80250d8d44b4a7c6f86dbd962a1d232f5a0627428fe379c14694bcdeaf
-
SHA512
1dc271cce5f0b8adf1f0487142698721e648b95b5af6336deb8d0fa95b1a24e618bd13284f369f20fa3970a78e2bf339b3fbb93247e6beee2b370b0101b393d4
-
SSDEEP
393216:gqO3dTf4qdfhfBie5QdoxLVdDQRVwmmLz5nWLfHXr:gqO3dTfrdfhZodoPdDQROvULfHb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8400d80250d8d44b4a7c6f86dbd962a1d232f5a0627428fe379c14694bcdeaf
Files
-
e8400d80250d8d44b4a7c6f86dbd962a1d232f5a0627428fe379c14694bcdeaf.exe windows:4 windows x86
29264dc7f280213ceff9dfa9ab6ee25a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
user32
GetSysColorBrush
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
oleaut32
VariantCopy
comctl32
ImageList_ReplaceIcon
oledlg
ord8
ws2_32
recv
Sections
.text Size: 5.2MB - Virtual size: 26.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE