Behavioral task
behavioral1
Sample
e06b336ed92ea7dcd9226899bc2fd1ed.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e06b336ed92ea7dcd9226899bc2fd1ed.exe
Resource
win10v2004-20240226-en
General
-
Target
e06b336ed92ea7dcd9226899bc2fd1ed
-
Size
192KB
-
MD5
e06b336ed92ea7dcd9226899bc2fd1ed
-
SHA1
710e283e319798b618bfac21660f8de63c0ce3c6
-
SHA256
8f192f3c913e8490c5f3f8eeb419f4740bf4da7d1b807675afe6c099955c71bb
-
SHA512
51d065ecba711f884666e95093c7382f59a46912e0bef462726ca97dbdeaeeaf24cd0c0939dd0eaa2bde4e7cea59acad0ac1a23ff7e4330de642bb0c2bca6ab3
-
SSDEEP
3072:2UxJwwfQbEl0Qo7t3uNbcdo+csiTZvXA71EQPbBTVD370I:2UxmwYgekNboVlAStZD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e06b336ed92ea7dcd9226899bc2fd1ed
Files
-
e06b336ed92ea7dcd9226899bc2fd1ed.exe windows:4 windows x86 arch:x86
6bf65fe13ae3919f932015c48ae2db6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalAlloc
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetPrivateProfileIntA
CloseHandle
WriteFile
CreateFileA
WritePrivateProfileStringA
CreateThread
CreateEventA
ReadFile
ResetEvent
SetEvent
GetTickCount
ExitThread
CreateSemaphoreA
CreateMutexA
ReleaseMutex
OpenMutexA
Sleep
CreateFileMappingA
GetModuleFileNameA
GetPrivateProfileStringA
GlobalUnlock
GlobalLock
LockResource
LoadResource
FindResourceA
SetEndOfFile
GetStringTypeW
GetStringTypeA
WaitForSingleObject
GetProcAddress
ReleaseSemaphore
GetACP
SetFilePointer
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetCPInfo
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
LoadLibraryA
GetLastError
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
FindFirstFileA
FindNextFileA
GetOEMCP
FindClose
TerminateProcess
HeapFree
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
user32
SendDlgItemMessageA
GetDlgItemTextA
SetWindowTextA
GetDlgItem
ScreenToClient
CreateWindowExA
DestroyWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
FindWindowA
GetDlgItemInt
CreateDialogParamA
LoadIconA
SetClassLongA
SetWindowLongA
ShowWindow
UpdateWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
MessageBoxA
PostMessageA
EnableWindow
SetWindowPos
GetSystemMenu
InsertMenuA
DrawMenuBar
LoadImageA
MoveWindow
SetDlgItemInt
SetDlgItemTextA
CreatePopupMenu
AppendMenuA
EnableMenuItem
GetWindowRect
TrackPopupMenu
DestroyMenu
CallWindowProcA
GetParent
SendMessageA
SetForegroundWindow
GetWindowLongA
gdi32
CreateFontA
comdlg32
GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA
advapi32
RegSetValueA
RegCloseKey
RegCreateKeyA
shell32
DragQueryFileA
DragFinish
Sections
.text Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 108KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE