Static task
static1
Behavioral task
behavioral1
Sample
e5e3e6b3fc98871a01ec668d1d9b040c.exe
Resource
win7-20231215-en
General
-
Target
e5e3e6b3fc98871a01ec668d1d9b040c.exe
-
Size
174KB
-
MD5
e5e3e6b3fc98871a01ec668d1d9b040c
-
SHA1
a2a14c610cd5e169b7504788105ec37c1f7515cd
-
SHA256
3887d3d133504bb41d03e8fd96539c38c3accaf5aa97f2948599a473800d0bef
-
SHA512
4a577754a8dd6282bf155726a241fa89549a467f1d6ca19074cc0ac35e4d59f5bb5134ed032a6ab9b14ad8eaaa3f813ab538c1f3a2af734c5fc0cef0cdcff34d
-
SSDEEP
3072:EorjHktzHeO/3wBP/n61FAMMnVv4L1LWxxjOm:hr4Hv5MVv4xLWL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5e3e6b3fc98871a01ec668d1d9b040c.exe
Files
-
e5e3e6b3fc98871a01ec668d1d9b040c.exe.exe windows:4 windows x86 arch:x86
60fd1f8a4d62b3c300aa0a0b884a4c8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatW
GetModuleHandleA
GetProcAddress
CloseHandle
GetWindowsDirectoryW
CreateFileW
VirtualAllocEx
user32
LoadIconA
advapi32
RegOpenKeyW
RegCloseKey
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 220B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
UWDLMzNA Size: 1KB - Virtual size: 1KB
lcfMFBuP Size: 512B - Virtual size: 385B
yMAwXqSu Size: 3KB - Virtual size: 3KB
SncbgVHd Size: 1024B - Virtual size: 558B
ZLmYOHBA Size: 512B - Virtual size: 298B
xXABgQJg Size: 512B - Virtual size: 154B
uvtnWulB Size: 512B - Virtual size: 287B
fXPAGJNt Size: 1024B - Virtual size: 862B
DRpGPxYz Size: 4KB - Virtual size: 4KB
lBykkYTS Size: 512B - Virtual size: 29B