Static task
static1
Behavioral task
behavioral1
Sample
e07ed9e8a436333ba137d089f7ad085a.exe
Resource
win7-20240215-en
General
-
Target
e07ed9e8a436333ba137d089f7ad085a
-
Size
218KB
-
MD5
e07ed9e8a436333ba137d089f7ad085a
-
SHA1
7d090cf3e4356948df929caacff273dcfdcd21ba
-
SHA256
ae0c7ff6d17eef2f83b2f90d8d62ea7c9e2a8025ae002fb6552a0b2e0ae93980
-
SHA512
0e155aa1c2bf305643a157f030c66c3558a566fac951981d764d52a06b10a46a8cebdbea9c8751c2e8bfe2d41f305c0c6ee946c3121339520329e64d70dbf1c7
-
SSDEEP
6144:UHjwI7RoW4UCeagIWNmy7fX4hbBgiQcdmSZ/Rav:gjwARsULagrA6XsBx5/Rav
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e07ed9e8a436333ba137d089f7ad085a
Files
-
e07ed9e8a436333ba137d089f7ad085a.exe windows:4 windows x86 arch:x86
c865f16b52dcc3aaeeafcca3f1060405
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
oleaut32
SysFreeString
advapi32
RegCloseKey
user32
CharNextA
gdi32
SaveDC
version
VerQueryValueA
wsock32
send
shell32
ShellExecuteA
ole32
IsEqualGUID
urlmon
URLDownloadToFileA
comctl32
ImageList_Add
wininet
FtpPutFileA
winmm
waveInOpen
rasapi32
RasEnumEntriesA
netapi32
Netbios
ntdll
NtUnmapViewOfSection
NtQuerySystemInformation
gdiplus
GdipFree
avicap32
capGetDriverDescriptionA
shfolder
SHGetFolderPathA
ws2_32
WSAIoctl
msacm32
acmStreamSize
pstorec
PStoreCreateInstance
url
InetIsOffline
Sections
.MPRESS1 Size: 211KB - Virtual size: 700KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE