Static task
static1
Behavioral task
behavioral1
Sample
e068374e479cfa1cd7cce7f5622f1e30.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e068374e479cfa1cd7cce7f5622f1e30.exe
Resource
win10v2004-20240226-en
General
-
Target
e068374e479cfa1cd7cce7f5622f1e30
-
Size
55KB
-
MD5
e068374e479cfa1cd7cce7f5622f1e30
-
SHA1
164b1b4e1af490b42af7a65911725f2777dcd7d5
-
SHA256
ca8b6115e735211e7dbabae9fd7ad592fd144c71eafe53223cfc4b4f7e08ced3
-
SHA512
f41f5fe618b14eb97a6f2e3c7a0a4924c9cc0d49470b9b8babd8adfd1509e07a46305cb66f7eae559c74ee43724e24860d4b8299e2206349af5cadf753d23ff4
-
SSDEEP
768:JQoB5V6CE9wL8CB4c/qQn7KgXNqlfUDXqmLWKEL8gqlQ4M33wWx71Oygl:J7BH69vcyQLX8l8OmLW54gGMvxROygl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e068374e479cfa1cd7cce7f5622f1e30
Files
-
e068374e479cfa1cd7cce7f5622f1e30.exe windows:4 windows x86 arch:x86
79985a6c99e785fa0a04859703bbfe54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxIndirectA
LoadAcceleratorsA
GetWindowTextA
GetDC
EnableWindow
EnableMenuItem
DrawTextA
DrawIcon
DispatchMessageA
DestroyWindow
CreateMenu
CreateDesktopA
CopyRect
CopyImage
BeginPaint
wsprintfA
kernel32
GetSystemTime
SetEndOfFile
SetCurrentDirectoryA
RaiseException
OpenFileMappingA
OpenFile
LoadLibraryA
LeaveCriticalSection
GetTimeFormatA
GetStartupInfoA
lstrcpyA
lstrcmpiA
WriteFile
UnmapViewOfFile
TlsFree
SleepEx
CompareStringA
EnumResourceLanguagesW
EnumResourceNamesA
ExitProcess
ExitThread
FindResourceA
GetCommandLineA
GetModuleHandleA
Sleep
oleaut32
GetErrorInfo
OleLoadPicture
OleLoadPicturePath
OleTranslateColor
SafeArrayAccessData
SafeArrayAllocData
SafeArrayAllocDescriptor
SysReAllocString
ClearCustData
Sections
.text Size: 18KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ