Static task
static1
Behavioral task
behavioral1
Sample
e602bc567cb1acf6a5386a583cd2bad0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e602bc567cb1acf6a5386a583cd2bad0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
e602bc567cb1acf6a5386a583cd2bad0_exe32.exe
-
Size
666KB
-
MD5
e602bc567cb1acf6a5386a583cd2bad0
-
SHA1
9dd4788ab7f8ec5f510181a52a37c328f1aef531
-
SHA256
94e5783ba9e9391c76bdd9cfc5a1fc9f10b7a37b5c069fd080e882bbccbb5d41
-
SHA512
6a168f14817d1f969afb305ce8f4a189c948a3c568a0af395eb9db6b1227390c2e02df11eb3b87537d0a2eb6e966b96e30046af8861f4dde639d7f1f97b64665
-
SSDEEP
12288:8+P0zj7rHErYXG2zp4MIO98soIWm3kCCSi6chICHzG+xPM/L/IQCtCLfDG2YI8f:Ior0G2N4zOKsoIbBSRzfZoL/I5CLbHYv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e602bc567cb1acf6a5386a583cd2bad0_exe32.exe
Files
-
e602bc567cb1acf6a5386a583cd2bad0_exe32.exe.exe windows:4 windows x86
cf33793432872ea1bdab1e2964e0a684
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetFilePointer
ReadFile
CreateFileA
CreateProcessA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
DeleteFileA
Sleep
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
WriteFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetStringTypeW
user32
MessageBeep
MessageBoxA
FindWindowA
LoadStringA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ