Static task
static1
Behavioral task
behavioral1
Sample
e03cff30757c1400fb2fba0c9a7479cb.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e03cff30757c1400fb2fba0c9a7479cb.exe
Resource
win10v2004-20240226-en
General
-
Target
e03cff30757c1400fb2fba0c9a7479cb
-
Size
71KB
-
MD5
e03cff30757c1400fb2fba0c9a7479cb
-
SHA1
8bd96a4bda853473fba4298ffbcfe6f78b255b0e
-
SHA256
5a16b8cf808357412a3aae1026e225bdb69309c8adb66190a53cc2d80e659627
-
SHA512
f07190a3b93bd5f7c7b719e839dfcfbb7837aac655294f65ea4b52b2d89df976d2b8a0b12651f96d043f9e137ef90ee5a6ffb13dc957562b46a6fd5e83d97197
-
SSDEEP
1536:IUdF3rx8S9E0mOecoAtYZu0wQc3djq961XJ5ag+BA/A:IUP9fa0mOeL64u0wTq961J5ZGAY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e03cff30757c1400fb2fba0c9a7479cb
Files
-
e03cff30757c1400fb2fba0c9a7479cb.exe windows:4 windows x86 arch:x86
aefcd1187708b622071e7926c1f73a10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
UnlockServiceDatabase
RevertToSelf
LsaOpenSecret
RegUnLoadKeyW
LsaClose
msvcrt
strlen
iswcntrl
strcmp
user32
GetScrollPos
LoadKeyboardLayoutW
GetForegroundWindow
GetMenuStringW
SetDoubleClickTime
SendInput
wininet
ShowCertificate
InternetDialW
InternetGetCookieW
InternetSetCookieW
UrlZonesDetach
Sections
.text Size: 46KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE