Static task
static1
Behavioral task
behavioral1
Sample
e0d09f86a196a7f28fa5d6ca9e320e15.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0d09f86a196a7f28fa5d6ca9e320e15.exe
Resource
win10v2004-20240226-en
General
-
Target
e0d09f86a196a7f28fa5d6ca9e320e15
-
Size
76KB
-
MD5
e0d09f86a196a7f28fa5d6ca9e320e15
-
SHA1
33332308e25501e43389e661990c89d9a2eb1058
-
SHA256
de84d51924f543f1cdefc74a7eeb6ca5d2e3078a7d326e447465d6f3a62b1acc
-
SHA512
3d748b440d4e795663e5bb9eac1c452629357aab1aaec3e422ec854f7d8bec2c84f22b328b1015518ef4586ea24f150f17c182027d07f68dd3e4050431d1f964
-
SSDEEP
768:ZsbCW9FfQgocwrg54vpWtUf/3wZTcp84WV/884juwTSOT4SWaB/uZfYIY:6bCW9tzocwK4xWte/3wa246d4jt/1/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0d09f86a196a7f28fa5d6ca9e320e15
Files
-
e0d09f86a196a7f28fa5d6ca9e320e15.exe windows:4 windows x86 arch:x86
904a7ff012ad80bb0aa3bc49d1a88280
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imagehlp
ImageRemoveCertificate
comdlg32
GetOpenFileNameA
comctl32
InitCommonControls
shell32
SHFileOperationA
ShellExecuteA
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileMappingA
CreateThread
DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
GetCurrentDirectoryA
GetFileAttributesA
GetFileSize
GetFileTime
GetModuleHandleA
GetProcessHeap
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
MapViewOfFile
MultiByteToWideChar
SetFileAttributesA
SetFileTime
UnmapViewOfFile
WriteFile
lstrcatA
ole32
CoTaskMemAlloc
CreateStreamOnHGlobal
OleFlushClipboard
gdiplus
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageHeight
GdipGetImageWidth
GdiplusShutdown
GdiplusStartup
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
DeleteDC
DeleteObject
GetBitmapBits
GetObjectA
SelectObject
SetBitmapBits
SetBkColor
SetStretchBltMode
SetTextColor
StretchBlt
ord1002
GetTextMetricsW
user32
AnimateWindow
BeginPaint
CallWindowProcA
CheckDlgButton
DefWindowProcA
DialogBoxIndirectParamA
DialogBoxParamA
DrawTextA
EndDialog
EndPaint
FillRect
GetClientRect
GetDC
GetDlgItem
GetParent
GetSysColor
GetSysColorBrush
GetWindowLongA
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
IsDlgButtonChecked
LoadCursorA
LoadImageA
MessageBeep
MessageBoxA
RegisterClassExA
SendDlgItemMessageA
SendMessageA
SetCursor
SetDlgItemTextA
SetWindowLongA
TrackMouseEvent
msvcr100
_isctype
mfc42u
ord6582
shlwapi
ord8
rpcrt4
TowerExplode
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE