Static task
static1
Behavioral task
behavioral1
Sample
e518625844848805ddf2dae9479ccdfdf6013084b68910cd004954aa81e30791.exe
Resource
win7-20240221-en
General
-
Target
e518625844848805ddf2dae9479ccdfdf6013084b68910cd004954aa81e30791
-
Size
344KB
-
MD5
e90fbfc35090355aec173d79341b7b8c
-
SHA1
6de2e18af5013c1236f691d03fe739471126a42e
-
SHA256
e518625844848805ddf2dae9479ccdfdf6013084b68910cd004954aa81e30791
-
SHA512
c9fdc21fc07ea8272cfa9555316d91df9fab5d226f5c696b78d4cb4461df8ab4b35a01da0d3ca46ce229e945bb33ae23f1c7fb39c4ba1764af50d70915623610
-
SSDEEP
6144:DX+psoWJ+IvLI7BziS3qoJGd2GexPZmxMcVp0XpY:ymoWkI094og2GgPZkiC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e518625844848805ddf2dae9479ccdfdf6013084b68910cd004954aa81e30791
Files
-
e518625844848805ddf2dae9479ccdfdf6013084b68910cd004954aa81e30791.exe windows:5 windows x86 arch:x86
3b3ca5844bdb8b6b333c1e673e18f1c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
GetDC
advapi32
RegCloseKey
shell32
ShellExecuteW
ws2_32
gethostbyaddr
iphlpapi
GetAdaptersInfo
oleacc
LresultFromObject
gdi32
SaveDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
IOKGDTTY Size: - Virtual size: 484KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IOKGDTTY Size: 326KB - Virtual size: 328KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE