Static task
static1
Behavioral task
behavioral1
Sample
e07eb914f004b7a28ed39e38828bbc3b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e07eb914f004b7a28ed39e38828bbc3b.exe
Resource
win10v2004-20240226-en
General
-
Target
e07eb914f004b7a28ed39e38828bbc3b
-
Size
35KB
-
MD5
e07eb914f004b7a28ed39e38828bbc3b
-
SHA1
0280fcaa64c1fe7d8e84a408140a6a1abfb7a554
-
SHA256
b79907cd87d12417fa047e9c6b3e91f74d8930b2f1eeb5bf4e6566b2e7391ef5
-
SHA512
b18b4da8b6b26647b4506bade30fe156b9c71fec38e4185f0c12f6bbe32316a51da4af32c6f67000e4c38d7c949452f2299755bdd437059efe7ede8a4cfd2fe1
-
SSDEEP
384:cm5HR4jyMOPfGJKZtY6XewwqQvh9FQSGuBFXccJlSA5KDpKDpKDiAK:xHA2fEKTnZCvFQgZLzsK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e07eb914f004b7a28ed39e38828bbc3b
Files
-
e07eb914f004b7a28ed39e38828bbc3b.exe windows:4 windows x86 arch:x86
719ac44699879302779f01b626a74fea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentDirectoryA
CompareStringA
GetProcAddress
VirtualAlloc
GetTickCount
LoadLibraryA
user32
TranslateMessage
DispatchMessageA
GetMessageA
oleaut32
VarRound
ole32
CreateObjrefMoniker
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ