Static task
static1
Behavioral task
behavioral1
Sample
e58434247892c57f2cc6b8552ed9dc90_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e58434247892c57f2cc6b8552ed9dc90_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
e58434247892c57f2cc6b8552ed9dc90_exe32.exe
-
Size
40KB
-
MD5
e58434247892c57f2cc6b8552ed9dc90
-
SHA1
de9b125dee5fbd1a23bd4b51e7e81931cf4b793c
-
SHA256
fe072216a5fff9d4302b227748c10ad8511c7a7cd0f7507f2152dbb4049e7374
-
SHA512
835ef1d1ccb113fc783e8adfdb4f0b2f531f13a828a50ef23f00f47ccc0f06da742a074f0802c574290e677c5889e7916bcb1545968b6bdcd1a61ab519381dd0
-
SSDEEP
384:ODIg+GkEkTfjJGRKthVGQMkqFfJokrvGB5vuU4sdQprwqEvmnRRTxVQzu:OIHfj3hVSRJt+D2hZz0u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e58434247892c57f2cc6b8552ed9dc90_exe32.exe
Files
-
e58434247892c57f2cc6b8552ed9dc90_exe32.exe.exe windows:5 windows x86
77bc4c94329925fab055077cd2ff036a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
DispatchMessageA
ShowWindow
LoadCursorW
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
PostMessageA
SetWindowTextA
GetKeyboardState
PostQuitMessage
GetClassLongA
kernel32
HeapAlloc
GetProcessHeap
GetModuleHandleA
HeapCreate
DeleteFileA
HeapFree
HeapReAlloc
SetFilePointer
WriteFile
ReadFile
CreateFileA
gdi32
GetStockObject
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ