Static task
static1
Behavioral task
behavioral1
Sample
e058cdc4a2aa14676ae8c00d8413edd7d5315d0a7837dd7856e8e2e2a91b4c10.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
e058cdc4a2aa14676ae8c00d8413edd7d5315d0a7837dd7856e8e2e2a91b4c10.exe
Resource
win10v2004-20231020-en
General
-
Target
e058cdc4a2aa14676ae8c00d8413edd7d5315d0a7837dd7856e8e2e2a91b4c10
-
Size
2.8MB
-
MD5
586ddee2aa4cb2c549fdf98bb9709804
-
SHA1
749771994e4005f6d07ae059ffddb84779b621a2
-
SHA256
e058cdc4a2aa14676ae8c00d8413edd7d5315d0a7837dd7856e8e2e2a91b4c10
-
SHA512
2a4f001c3cd6bed8cc09d7a35635d2fddf7b90b4231265fd5751ac78607be94d49743ebab1e3374a9b63d0ca02042bbd94e5621298d437fd0ba0ea965956530f
-
SSDEEP
49152:V+PhjrNkwHChC9km0UCczj5ESpvH0Pq9odTYGAiKLjRE0xR5UmPyhOOyGwc:VeMe0UCcz6GHj9oGljRE0xR5HKHBwc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e058cdc4a2aa14676ae8c00d8413edd7d5315d0a7837dd7856e8e2e2a91b4c10
Files
-
e058cdc4a2aa14676ae8c00d8413edd7d5315d0a7837dd7856e8e2e2a91b4c10.exe windows:5 windows x86
4a953c8bd157b2716295e2979b6789e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
user32
LoadMenuW
gdi32
SelectObject
msimg32
TransparentBlt
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
shlwapi
PathFindExtensionA
uxtheme
GetThemeSysColor
ole32
OleDestroyMenuDescriptor
oleaut32
SysFreeString
oledlg
ord8
oleacc
AccessibleObjectFromWindow
gdiplus
GdipDrawImageRectI
imm32
ImmReleaseContext
winmm
PlaySoundA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.7MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 982KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ