Static task
static1
Behavioral task
behavioral1
Sample
e0da7fff456644a7fb9f7a7f7e3c35b3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e0da7fff456644a7fb9f7a7f7e3c35b3.exe
Resource
win10v2004-20231215-en
General
-
Target
e0da7fff456644a7fb9f7a7f7e3c35b3
-
Size
50KB
-
MD5
e0da7fff456644a7fb9f7a7f7e3c35b3
-
SHA1
4e5ca249fd1ecb7eada13142d730aef941af2d02
-
SHA256
8cfaa7f2205e1078875c7e559963ac85210927b8cf7f94ef01c07ae45524acc4
-
SHA512
94b5610274e088b921d0b646f5e797247c137b69bc1fe3ecdebea0dcf5de06ebd7bac3c3427610ea27d44aae61cf95d41f532455021af8513200b188a49e2659
-
SSDEEP
768:HDfL5Qj0s0Oi2Wjm8N+SWM3/HKaKUL+KE36jrsIHgUj5eC2yuJK8HM:LF80Ui24mW+SzK8XE36nYlC2zJKL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0da7fff456644a7fb9f7a7f7e3c35b3
Files
-
e0da7fff456644a7fb9f7a7f7e3c35b3.exe windows:4 windows x86 arch:x86
cfef8918eb06fe9cd292b786655a4658
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
urlmon
URLDownloadToFileA
Sections
CODE Size: 35KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE