_Scintilla_DirectFunction@16
Static task
static1
Behavioral task
behavioral1
Sample
e8eecf35b2d04d152694e12e04c5e3f79a2e0ecdf983284d9e8d9992b94aadbd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e8eecf35b2d04d152694e12e04c5e3f79a2e0ecdf983284d9e8d9992b94aadbd.exe
Resource
win10v2004-20230915-en
General
-
Target
e8eecf35b2d04d152694e12e04c5e3f79a2e0ecdf983284d9e8d9992b94aadbd
-
Size
8.6MB
-
MD5
97bcce65a20e7112c4cc18c4d5dbca46
-
SHA1
11d3c5bc01dcc39fdffdc815aef61dc12aaadc05
-
SHA256
e8eecf35b2d04d152694e12e04c5e3f79a2e0ecdf983284d9e8d9992b94aadbd
-
SHA512
810c6fb5d68412647d19bb2278a449ad9b42c3ca3ba2636a2a65bd0e9951a31c9afa76c4580000737e7ab309037a7d606016c9574ec77c5ed057aff776e6c6f2
-
SSDEEP
196608:x+CfUyGHjsKdpGzbGbbIU1bu+UafNNAhC3JJI1qTaFeHjQmzRa:x++GH4Q43Gbb5S+UgD3rIY18wRa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8eecf35b2d04d152694e12e04c5e3f79a2e0ecdf983284d9e8d9992b94aadbd
Files
-
e8eecf35b2d04d152694e12e04c5e3f79a2e0ecdf983284d9e8d9992b94aadbd.exe windows:4 windows x86
e6679f1c2672f971ca25678fb5d0e505
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutPause
ws2_32
closesocket
version
VerLanguageNameA
rasapi32
RasHangUpA
kernel32
GetWindowsDirectoryA
user32
GetClassNameA
gdi32
ExcludeClipRect
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
SafeArrayUnaccessData
comctl32
ImageList_ReplaceIcon
imm32
ImmReleaseContext
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Exports
Exports
Sections
.text Size: 6.0MB - Virtual size: 10.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ