Static task
static1
Behavioral task
behavioral1
Sample
ec3ce5460684f1917931e6a9a1cd3188026e59800f37fbcf880641330142e520.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ec3ce5460684f1917931e6a9a1cd3188026e59800f37fbcf880641330142e520.exe
Resource
win10v2004-20231025-en
General
-
Target
ec3ce5460684f1917931e6a9a1cd3188026e59800f37fbcf880641330142e520
-
Size
2.9MB
-
MD5
04a0752125e988fdc9c4d985acb501d2
-
SHA1
a197879ac9ce1e86064e74208c2f3f16c43376bd
-
SHA256
ec3ce5460684f1917931e6a9a1cd3188026e59800f37fbcf880641330142e520
-
SHA512
7314292a8a3580de0d1732ba74357963461ec9ce2f23d582efb1380eeee3c37c8178d5606bb0ccf5638f58ab680bb38653ab271853c0cf76561bcebce5cbbec4
-
SSDEEP
49152:KIJI3ZFfQxd1QvWdm/RpF9+XFpmvUU4SxZyNWbjP59w4enIanxb4Zjb9Pp:6sxxw99ZyNWji92H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec3ce5460684f1917931e6a9a1cd3188026e59800f37fbcf880641330142e520
Files
-
ec3ce5460684f1917931e6a9a1cd3188026e59800f37fbcf880641330142e520.exe windows:4 windows x86 arch:x86
c5f4fae9635b7eeac6085faa57e92d07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamOut
ws2_32
WSACleanup
user32
wvsprintfA
gdi32
CombineRgn
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
RevokeDragDrop
oleaut32
SafeArrayGetLBound
comctl32
_TrackMouseEvent
wininet
FindFirstUrlCacheEntryA
Sections
.text Size: 2.9MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE