Static task
static1
Behavioral task
behavioral1
Sample
e939af8b25d4fd6c4ff2d0dd76bd573c0311e356784f5b58c0915d70aa94edef.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e939af8b25d4fd6c4ff2d0dd76bd573c0311e356784f5b58c0915d70aa94edef.exe
Resource
win10v2004-20230915-en
General
-
Target
e939af8b25d4fd6c4ff2d0dd76bd573c0311e356784f5b58c0915d70aa94edef
-
Size
176KB
-
MD5
bd88ad764ef2a9414a0cd39366cd6a93
-
SHA1
054a85ac254d0b6ac87d9e041e5b892786201419
-
SHA256
e939af8b25d4fd6c4ff2d0dd76bd573c0311e356784f5b58c0915d70aa94edef
-
SHA512
f839a67a772993bec0af509306852d9856d63d1d595b76317de44368d4e947c760eb5726fc58accd649c904d92cda28b0211b2160998c56c030c8f2ae2792ff7
-
SSDEEP
1536:7Yp0GQp9PmJfClJyfM810+fxqJVFgN7aUF+6dqov:7YqGQXOJfWuM8m+fxq/F/eqov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e939af8b25d4fd6c4ff2d0dd76bd573c0311e356784f5b58c0915d70aa94edef
Files
-
e939af8b25d4fd6c4ff2d0dd76bd573c0311e356784f5b58c0915d70aa94edef.exe windows:4 windows x86
d6400e8cf1420210e8c926b02a4e050b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
InvalidateRect
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
gdi32
Rectangle
Ellipse
kernel32
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
FlushFileBuffers
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
HeapValidate
IsBadReadPtr
IsBadWritePtr
SetConsoleCtrlHandler
GetLastError
CloseHandle
VirtualAlloc
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
Sections
.text Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ