Static task
static1
Behavioral task
behavioral1
Sample
0e9ea7b265f51046fb1079036718037b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e9ea7b265f51046fb1079036718037b.exe
Resource
win10v2004-20231222-en
General
-
Target
0e9ea7b265f51046fb1079036718037b
-
Size
541KB
-
MD5
0e9ea7b265f51046fb1079036718037b
-
SHA1
750d0787f3cb55438f7f4668f8862864719b3f65
-
SHA256
644992bc112018fc3753a8c75cea5d364aff24264be73303a13ef0326c789878
-
SHA512
2a1f435675ab1e1dadfd8b28d76ffe04e75ece515640eea91095a91e8eaf7e29c4cd68e0ce59ccc526d0d42e66982017de5db56ce335fc889cab274c208bbef2
-
SSDEEP
12288:EDmW4axkK+/jcOpfvC01CjXaelm67EeDtTq:gt1PkIOpfK+Cja3eDM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e9ea7b265f51046fb1079036718037b
Files
-
0e9ea7b265f51046fb1079036718037b.exe windows:4 windows x86 arch:x86
a142f6f96aa39bb7512feb9d5e7a45b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptGetKeyParam
ReportEventA
LookupSecurityDescriptorPartsW
RegOpenKeyExA
wininet
InternetDial
CreateUrlCacheContainerW
FtpPutFileA
InternetGetConnectedState
InternetGetConnectedStateExW
comctl32
InitCommonControlsEx
kernel32
SetComputerNameW
GetCurrentThread
LocalHandle
EnumSystemLocalesA
CompareStringA
LCMapStringA
InterlockedIncrement
RaiseException
HeapReAlloc
GetCurrentProcessId
SetConsoleCtrlHandler
TlsSetValue
GetACP
WriteFile
RtlUnwind
GetLocaleInfoA
TlsGetValue
InterlockedDecrement
HeapAlloc
FindResourceExW
GetModuleHandleA
GetCommandLineW
ExitProcess
FillConsoleOutputAttribute
GetLastError
GetModuleFileNameW
WideCharToMultiByte
HeapDestroy
GetLocaleInfoW
LoadLibraryA
FindNextChangeNotification
GetCPInfo
GetSystemTimeAsFileTime
SetLocaleInfoW
WriteConsoleA
MultiByteToWideChar
SetFilePointer
GetStartupInfoA
GetTimeFormatA
CreateFileA
GetCommandLineA
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetUserDefaultLCID
GetProcAddress
SetHandleCount
TlsAlloc
OpenMutexA
TlsFree
SetEnvironmentVariableA
HeapCreate
GetStdHandle
GetConsoleCP
TerminateProcess
IsValidCodePage
LCMapStringW
FreeEnvironmentStringsW
GetModuleFileNameA
GetFileType
GetStartupInfoW
FlushFileBuffers
DeleteCriticalSection
GetStringTypeW
GetProfileIntW
IsValidLocale
FreeLibrary
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetStringTypeA
GetNamedPipeHandleStateA
GetConsoleMode
SetLastError
VirtualAlloc
WriteConsoleW
VirtualFree
CompareStringW
GetStringTypeExA
HeapFree
EnterCriticalSection
QueryPerformanceCounter
CreateMutexA
LeaveCriticalSection
Sleep
ReadFile
GetDateFormatA
GetFileAttributesW
CloseHandle
GetTickCount
GetModuleHandleW
UnhandledExceptionFilter
VirtualQuery
GetConsoleOutputCP
SetConsoleCursorPosition
GetCurrentThreadId
InterlockedExchange
HeapSize
GetOEMCP
GetCurrentProcess
GetEnvironmentStringsW
IsDebuggerPresent
user32
GetClassNameA
RegisterClassExA
RegisterClassA
Sections
.text Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ