Static task
static1
Behavioral task
behavioral1
Sample
2e5d8a3a17a4d6eb88fc2e487c485b45.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
2e5d8a3a17a4d6eb88fc2e487c485b45.exe
Resource
win10v2004-20231201-en
General
-
Target
2e5d8a3a17a4d6eb88fc2e487c485b45
-
Size
124KB
-
MD5
2e5d8a3a17a4d6eb88fc2e487c485b45
-
SHA1
3b0e48835c15b2d6e2be38d5faf5549680f7315d
-
SHA256
02921d2ec68a271bd0b09b0ed9f50ff58965fcd592a8230300b8f56e56158c71
-
SHA512
4604ef01f92a7bad002c2802cb70dfd0ed729d8130ac80d9ecd73f948f8166f7a320b00676b637e8e8a9c4175fcfe46d86dfee045595d27cc961fe5711487f07
-
SSDEEP
3072:9q8f/oic1i9uTAlPQSDwEyWefHEvGdxETCpPJ:A8f/U1iF/sUGdxET
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e5d8a3a17a4d6eb88fc2e487c485b45
Files
-
2e5d8a3a17a4d6eb88fc2e487c485b45.exe windows:5 windows x86 arch:x86
7bef13f58538df84f5270fe7542e9811
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
SetTimer
shell32
ShellExecuteExW
ole32
CoInitializeEx
psapi
GetModuleBaseNameW
shlwapi
StrStrNIW
ntdll
memset
advapi32
RegFlushKey
Sections
.MPRESS1 Size: 119KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE