Static task
static1
Behavioral task
behavioral1
Sample
e03cb7ea02d5b654376f782462b70f29.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e03cb7ea02d5b654376f782462b70f29.exe
Resource
win10v2004-20231215-en
General
-
Target
e03cb7ea02d5b654376f782462b70f29
-
Size
350KB
-
MD5
e03cb7ea02d5b654376f782462b70f29
-
SHA1
31b6caae14a4f2860e6d4408c928e41671fea07f
-
SHA256
112009b748c2f4912f6203623d5b2d904e3a5c888dfc053427a77f37d868b0f0
-
SHA512
fa4501c22ef6591b92afa6cce84667ffa9b682b422da096ff65bd209f1c90ff3547213388148ab015d3f310fd28c5133c4e0b7f6182e4e5b1313ccbd27d705ee
-
SSDEEP
6144:vFJ1Y+x6yd4nRUX5EIrKOhJUWpIlzgSUUJiEVR2HsyqBVb9A:v/q+x6A4niXtC+SUeaHsyOe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e03cb7ea02d5b654376f782462b70f29
Files
-
e03cb7ea02d5b654376f782462b70f29.exe windows:5 windows x86 arch:x86
b19391f696f547b84a25b9b8234b1bea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42u
ord823
ord825
advapi32
RegQueryValueExA
RegisterEventSourceA
ReportEventA
ole32
CoCreateInstance
oleaut32
SysAllocString
VariantClear
VariantInit
SystemTimeToVariantTime
SysFreeString
user32
GetDlgItem
wsprintfW
GetWindowLongW
LoadStringW
wsprintfA
EndDialog
GetFocus
GetWindowRect
LoadStringA
SendMessageW
SetWindowLongW
DialogBoxParamW
UpdateWindow
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upack Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.usa Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ