Static task
static1
Behavioral task
behavioral1
Sample
e0ee75b96d34bec3c76417315c07c2aa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0ee75b96d34bec3c76417315c07c2aa.exe
Resource
win10v2004-20240319-en
General
-
Target
e0ee75b96d34bec3c76417315c07c2aa
-
Size
27KB
-
MD5
e0ee75b96d34bec3c76417315c07c2aa
-
SHA1
59ea84514745146db7bd12a530a71e0314188d6a
-
SHA256
17f62d7e47fca2b4e7abac012b4e79247a392e1e28d18501bfad2aaba9006423
-
SHA512
dcd1581955baf7f9226590dd82ca3d114e7c8d0739f11e09ff167f253db8a9422fc0e9a890299bb29590273d36b680610a576d6dc3a71767b4589ceb4c97d715
-
SSDEEP
384:BwknmC21i45H1MLUU496jqDseOeNO7/TNl/4oLIGf:nnx215F1MLUU6Z7OeNOf4oLI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0ee75b96d34bec3c76417315c07c2aa
Files
-
e0ee75b96d34bec3c76417315c07c2aa.exe windows:1 windows x86 arch:x86
2a300e57823907a45b26a472b43a19e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_acmdln
_setsystime
feof
_exit
exit
_controlfp
_mbslwr
__p__fmode
_except_handler3
_XcptFilter
_ismbbkpunct
_initterm
memcpy
__setusermatherr
__p__commode
_control87
_adjust_fdiv
_mbschr
__set_app_type
_set_error_mode
_wstrtime
_wexecvp
free
_fileinfo
__getmainargs
kernel32
MapViewOfFile
GetStartupInfoA
SetLastError
GetProcAddress
DuplicateHandle
TlsAlloc
GetLastError
GetModuleHandleA
WriteConsoleA
LCMapStringW
GetTimeFormatA
GetFileAttributesA
FreeLibrary
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 187B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ