Static task
static1
Behavioral task
behavioral1
Sample
e9c4a2e3d126ea42491756ed1a905a50_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e9c4a2e3d126ea42491756ed1a905a50_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
e9c4a2e3d126ea42491756ed1a905a50_exe32.exe
-
Size
21KB
-
MD5
e9c4a2e3d126ea42491756ed1a905a50
-
SHA1
b6a4aad4baac7918b2cb1fc33b895cea9def8fe4
-
SHA256
9e624f8468f17aa3b543949609cc47f8b5c48a72db606c851dc1d8bc25142846
-
SHA512
1cc53e312d269ca2ece34839565eabc0f651e014572ffabe626ce0005767fc8fb315e5dfe1db0ecc4e96dc2bc6bd68d2aa3acb32e645a0f9b652e6f99ce463f6
-
SSDEEP
384:juQleWGZZ5+Ro5T3XdnrmXdiaqSPIL0oMAkYYFzlkOzjlSSWsELtVji4j:qQFGZ2RMT3XdnrmXdiaq6IL0oMAkYYFM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9c4a2e3d126ea42491756ed1a905a50_exe32.exe
Files
-
e9c4a2e3d126ea42491756ed1a905a50_exe32.exe.exe windows:5 windows x86
e547ce7593669d78b55bb099a0e2fc19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
GetQueueStatus
LoadIconA
RegisterClassA
gdi32
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
msacm32
acmStreamOpen
acmStreamSize
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
GetLengthSid
RegDeleteValueA
RegCreateKeyExA
kernel32
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
GetACP
ExitProcess
FreeLibrary
GetCPInfo
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ