Static task
static1
Behavioral task
behavioral1
Sample
e40d40b282748fddbc906647570a158bf1ebd5b0dc2c8a92bf7be66d857153d7.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
e40d40b282748fddbc906647570a158bf1ebd5b0dc2c8a92bf7be66d857153d7.exe
Resource
win10v2004-20231023-en
General
-
Target
e40d40b282748fddbc906647570a158bf1ebd5b0dc2c8a92bf7be66d857153d7
-
Size
641KB
-
MD5
d9faaa79172a3ce7a0ca48044ae6075a
-
SHA1
0029f0bb531efba97a6f1bdbde6c825b56dab868
-
SHA256
e40d40b282748fddbc906647570a158bf1ebd5b0dc2c8a92bf7be66d857153d7
-
SHA512
f667522d6ae738ba44fa1f2fd1dc6fd8fa9fd27f57f43ec057aeb9e5f3c7bce6c9c6739e5a01bbfc10d4c32565ec8daf73962c8a18ba5f36a86f2e6e0b8cebf6
-
SSDEEP
12288:53hjHidxgGeN9wyqW+JgMplBaKSkxS5ylfNnLf8F9xo3LrNPFSnapMqbxDQ:TjKxglCW+JgMpP+kxS5y3nATxodInGLD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e40d40b282748fddbc906647570a158bf1ebd5b0dc2c8a92bf7be66d857153d7
Files
-
e40d40b282748fddbc906647570a158bf1ebd5b0dc2c8a92bf7be66d857153d7.exe windows:4 windows x86 arch:x86
a0283cb4aef390a1b88cfe5888124ca6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
accountactivate
ord1
advapi32
AdjustTokenPrivileges
comctl32
ImageList_Create
comdlg32
PrintDlgA
gdi32
SetTextColor
iphlpapi
GetAdaptersInfo
itextout
xeDrawText
kpic10
KPIC_LoadPictureResource
normgrab
CleanupHookDll
ole32
CoTaskMemAlloc
oleaut32
SafeArrayGetElement
oledlg
ord8
olepro32
ord253
psapi
EnumProcessModules
shell32
ExtractIconA
statistics
Statistics_Online
tottsengine50
eTTSFirstVoice
user32
IsDialogMessageA
version
GetFileVersionInfoA
wininet
InternetGetLastResponseInfoA
winmm
PlaySoundA
winspool.drv
DocumentPropertiesA
wsock32
closesocket
xfile
CF_LoadFile
Sections
.text Size: 596KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE