Static task
static1
Behavioral task
behavioral1
Sample
e511f5f150604b743cc65dc107c2204d9bbe72f55a87c8bdadcf24f10ee9515c.exe
Resource
win7-20231215-en
General
-
Target
e511f5f150604b743cc65dc107c2204d9bbe72f55a87c8bdadcf24f10ee9515c
-
Size
2.3MB
-
MD5
c3eb34e79a7352239b5330bdb1187036
-
SHA1
b2da94d606403b057a13712b8782e4b66585c7aa
-
SHA256
e511f5f150604b743cc65dc107c2204d9bbe72f55a87c8bdadcf24f10ee9515c
-
SHA512
faf8104642651b29596b8297b5d4c86e15030bf172625cdb27c19149542a7a16a0bc9e7c835b7d5495df0069f505e47e527865f92a6435b86f261ef5d5e3b212
-
SSDEEP
49152:ORf/h6SeKhWZqnt698/xsCQorhimXp6dAXpabIixyur13XwgPG:ORfAmRMm5ab5xyY3gKG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e511f5f150604b743cc65dc107c2204d9bbe72f55a87c8bdadcf24f10ee9515c
Files
-
e511f5f150604b743cc65dc107c2204d9bbe72f55a87c8bdadcf24f10ee9515c.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 570KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lphawbwk Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xsyefrqz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE