Static task
static1
Behavioral task
behavioral1
Sample
ecf02a2b5939e84c1f832820fe11363f597f15aae373a95ffee59cb413a0aeb2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ecf02a2b5939e84c1f832820fe11363f597f15aae373a95ffee59cb413a0aeb2.exe
Resource
win10v2004-20230915-en
General
-
Target
ecf02a2b5939e84c1f832820fe11363f597f15aae373a95ffee59cb413a0aeb2
-
Size
56KB
-
MD5
b62707e0c69acb24433bc0074888ce1e
-
SHA1
59c6bb93cc9dd348792d6d14b9bb224f11097f5b
-
SHA256
ecf02a2b5939e84c1f832820fe11363f597f15aae373a95ffee59cb413a0aeb2
-
SHA512
f9f27190923a30f09fe0635725f485bbaac614cd352605051d13f5dd9ed3680f1bce8659348702c2ba8cb2ca8ff23cb401af58e1b82926b184be14aa80c4c21b
-
SSDEEP
768:OUypN1IaMcHeAdW/gv1GvmzGWMrl4t6BlsBoS0Xq4R:OUy/Hi/gvovmSWClpRR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecf02a2b5939e84c1f832820fe11363f597f15aae373a95ffee59cb413a0aeb2
Files
-
ecf02a2b5939e84c1f832820fe11363f597f15aae373a95ffee59cb413a0aeb2.exe windows:4 windows x86
05d3f5158ef7b14785e2ae5e94d0e6d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
SetEnvironmentVariableA
GetModuleFileNameA
GetPrivateProfileIntA
GetLastError
GetProcAddress
GetPrivateProfileStringA
ExpandEnvironmentStringsA
GetStringTypeA
LCMapStringW
GetCurrentProcess
GetWindowsDirectoryA
CreateProcessA
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
CloseHandle
FlushFileBuffers
WriteFile
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
MessageBoxA
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ