Static task
static1
Behavioral task
behavioral1
Sample
e016bb59364db56090fc1c011022d07b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e016bb59364db56090fc1c011022d07b.exe
Resource
win10v2004-20240226-en
General
-
Target
e016bb59364db56090fc1c011022d07b
-
Size
168KB
-
MD5
e016bb59364db56090fc1c011022d07b
-
SHA1
9b08174a0650b876c92749e4c63f9acbac2cf3bd
-
SHA256
fb3bed2cf4b1f8eb351b5610c754078c4f82d1001e6de78dd160e93233e7a799
-
SHA512
593c9098a16d4c69f0e2c39bb1e1e637cd45557982c669245d998765fa1a772c63020bb2c6fa1111b19e7c2acde44dbef15cf52d62473e9e1e8a7f4308b7e62a
-
SSDEEP
3072:uioNVaEjhx80r0V7pKjOVPusU/YSRe3igdNk2s+Q8wJno2:uz6Ejhx80O7xs///kdNk2Rlw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e016bb59364db56090fc1c011022d07b
Files
-
e016bb59364db56090fc1c011022d07b.exe windows:4 windows x86 arch:x86
cd755f0bd6c6325507b97d09eabbc9ad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
urlmon
URLDownloadToFileA
Sections
CODE Size: 135KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE