Static task
static1
Behavioral task
behavioral1
Sample
eae2daf910a930ec44e994b99cca9f2a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
eae2daf910a930ec44e994b99cca9f2a.exe
Resource
win10v2004-20231215-en
General
-
Target
eae2daf910a930ec44e994b99cca9f2a
-
Size
176KB
-
MD5
eae2daf910a930ec44e994b99cca9f2a
-
SHA1
b97f66c199a00c1b2c467f1eebc87ae6c879664b
-
SHA256
b45533d465b434f2b40b800e20075075ffe634379a81f78c9034d503b5ed2788
-
SHA512
9a4f31a097d662799fa87752b39c775a21f03cc9da9d612815a3f36fe1f83cc3abfc48754a9ea3caeb856fbc72bc011cd85f909d057330a178e026f93e283fb0
-
SSDEEP
3072:l8/wzcdIoW6EEAkKptog6j66zCgOQG7lfuoyZMAQ+gTfMudzlSihZekpbEHOdN+:uK6R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eae2daf910a930ec44e994b99cca9f2a
Files
-
eae2daf910a930ec44e994b99cca9f2a.exe windows:4 windows x86 arch:x86
40f7c1fa91b4e4d323de69978a63c9b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WaitForSingleObject
GetModuleFileNameA
GetCommandLineA
IsDBCSLeadByte
LocalFree
CloseHandle
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
CreateFileA
WriteFile
lstrlenA
lstrcatA
lstrcpyA
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
GetProcAddress
GetModuleHandleA
lstrcmpA
SetConsoleTitleA
GetVersionExA
lstrcmpiA
FindClose
FindFirstFileA
GetFullPathNameA
ExitProcess
GetLastError
GetExitCodeThread
LocalAlloc
CreateThread
GetCurrentThreadId
LoadResource
FindResourceExA
GetUserDefaultLangID
GetSystemDefaultLangID
SetLastError
lstrlenW
RtlUnwind
user32
wsprintfA
CharLowerA
CharNextA
CharToOemA
CharPrevA
GetMessageA
PostThreadMessageA
wvsprintfA
DispatchMessageA
TranslateMessage
LoadStringA
ole32
CoTaskMemAlloc
CoInitialize
CoGetClassObject
CoUninitialize
CoTaskMemFree
oleaut32
SysFreeString
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE