Static task
static1
Behavioral task
behavioral1
Sample
e0f3717cbbd96e09a77ea5522fb9c5b1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0f3717cbbd96e09a77ea5522fb9c5b1.exe
Resource
win10v2004-20240226-en
General
-
Target
e0f3717cbbd96e09a77ea5522fb9c5b1
-
Size
604KB
-
MD5
e0f3717cbbd96e09a77ea5522fb9c5b1
-
SHA1
b4f8e3b7aea234ca00a84f366cd75b58d2e0a6f4
-
SHA256
080de5950e76aeaacfe9381cfcad1ea2625cdbb5760ca0ec3633d1b73766f687
-
SHA512
4c465dd9c0db30620975cbf0344629eb05b956898d24995e2572915c1dc92d09bf2f68f4f41138b8bf066dd29baf8d74ee33964d02808b1d7bfc0423df3690fc
-
SSDEEP
12288:EmEznUuCX5IWB0KjPDPF56UHUQwKF/hbGkQLXry:ERnylKK7hVHUcNLQLb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0f3717cbbd96e09a77ea5522fb9c5b1
Files
-
e0f3717cbbd96e09a77ea5522fb9c5b1.exe windows:4 windows x86 arch:x86
e3c47309cf69abd0012fa6d9e711a2f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextMetricsA
CopyEnhMetaFileW
ScaleViewportExtEx
CreateScalableFontResourceW
FillRgn
DeleteObject
GetNearestPaletteIndex
SetBkMode
shell32
SHEmptyRecycleBinW
ExtractIconA
InternalExtractIconListW
comctl32
InitCommonControlsEx
ImageList_Create
DrawInsert
user32
GetProcessDefaultLayout
SetWindowPos
GetForegroundWindow
OemToCharW
IsDlgButtonChecked
SetMenuContextHelpId
DestroyWindow
ChildWindowFromPointEx
CharPrevW
PtInRect
WinHelpA
LoadIconW
GetScrollInfo
DefDlgProcA
MessageBoxExW
CreateMDIWindowW
CreateWindowExA
SendInput
ShowWindow
RegisterClassExA
DragDetect
GetWindowRgn
SetClipboardData
CreateWindowExW
MessageBoxW
CharLowerBuffW
DdeConnectList
ChangeDisplaySettingsA
CreateDialogIndirectParamW
DefWindowProcA
SetRect
ChangeMenuA
AnimateWindow
RegisterClassA
CheckMenuRadioItem
GetMonitorInfoA
GetDoubleClickTime
InsertMenuItemA
kernel32
MultiByteToWideChar
GetLocaleInfoW
lstrcmpi
GetTimeFormatA
WriteConsoleW
RtlUnwind
Sleep
HeapSize
HeapCreate
GetEnvironmentStringsW
CreateFileA
GetModuleHandleA
GetCurrentProcessId
CompareStringW
GetProcAddress
GetFileType
GetConsoleMode
GetLastError
GetCurrentThreadId
OpenMutexA
FlushFileBuffers
CloseHandle
VirtualAlloc
WideCharToMultiByte
SetEvent
GetConsoleCP
HeapAlloc
GetOEMCP
FreeEnvironmentStringsA
WriteFile
GetUserDefaultLCID
CompareStringA
HeapDestroy
SetFilePointer
GetACP
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleFileNameA
GetStringTypeW
EnterCriticalSection
TerminateProcess
ResumeThread
GetProcessHeap
GetTickCount
TlsFree
InitializeCriticalSection
ExitProcess
SetConsoleCtrlHandler
InterlockedExchange
HeapFree
GetVersionExA
IsValidCodePage
GetStartupInfoA
VirtualFree
WriteConsoleA
SetLastError
HeapReAlloc
GetCPInfo
IsValidLocale
FreeEnvironmentStringsW
CreateMutexA
LoadLibraryA
LCMapStringA
LCMapStringW
InterlockedIncrement
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetDateFormatA
VirtualQuery
EnumSystemLocalesA
GetCurrentProcess
GetStdHandle
FlushInstructionCache
TlsGetValue
TlsSetValue
LeaveCriticalSection
FreeLibrary
UnmapViewOfFile
TlsAlloc
IsDebuggerPresent
DeleteCriticalSection
GetLocaleInfoA
GetStringTypeA
SetHandleCount
GetTimeZoneInformation
SetEnvironmentVariableA
InterlockedDecrement
ReadFile
GetCurrentThread
GetEnvironmentStrings
UnhandledExceptionFilter
SetStdHandle
GetConsoleOutputCP
comdlg32
PageSetupDlgA
ChooseColorA
ReplaceTextW
GetSaveFileNameA
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ