Static task
static1
Behavioral task
behavioral1
Sample
e02b97cb24da71ceba62f22c7fed2c1ebc5545c6172b7d3dd9e9651fc7bf15dd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e02b97cb24da71ceba62f22c7fed2c1ebc5545c6172b7d3dd9e9651fc7bf15dd.exe
Resource
win10v2004-20230915-en
General
-
Target
e02b97cb24da71ceba62f22c7fed2c1ebc5545c6172b7d3dd9e9651fc7bf15dd
-
Size
1.7MB
-
MD5
8cd3c3a15e86cb8195071ff45724433b
-
SHA1
aeb5d6c801e6ff9685d5828514949813d8d27d6a
-
SHA256
e02b97cb24da71ceba62f22c7fed2c1ebc5545c6172b7d3dd9e9651fc7bf15dd
-
SHA512
0b9e5403acc1957111881c7cfeb358e67bf9fcfdecbccee8064bdb766ebb0fc768374b131dce04b4ab24034b409dd50872174e4730ecad7f4b1a0d75438fe2da
-
SSDEEP
49152:NA6DPtXmXJb/AMy2ud04AdmILghg3Nzve:NntU4rBvG9LjNzW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e02b97cb24da71ceba62f22c7fed2c1ebc5545c6172b7d3dd9e9651fc7bf15dd
Files
-
e02b97cb24da71ceba62f22c7fed2c1ebc5545c6172b7d3dd9e9651fc7bf15dd.exe windows:4 windows x86
b1590031811da523445675dcbe536f42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
CreateSemaphoreA
user32
GetActiveWindow
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
SafeArrayPutElement
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 620KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1024KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ