Static task
static1
Behavioral task
behavioral1
Sample
e24bb3edfc3b345f3e42a33fc32062a8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e24bb3edfc3b345f3e42a33fc32062a8.exe
Resource
win10v2004-20240226-en
General
-
Target
e24bb3edfc3b345f3e42a33fc32062a8.bin
-
Size
1.7MB
-
MD5
e24bb3edfc3b345f3e42a33fc32062a8
-
SHA1
b99b14683cdbb601c9df0a7117c1a409c9d41b1a
-
SHA256
df30ab84248d1fbdf9f1933fbb3079a2b5f1a59eda4dba5fdc18183ca1f215de
-
SHA512
ef807f060396e12d344bd3bc2deeb9af997f21ffa4ed7310d2411503b64e3194c0035f7048505b108f15f687b6529cc91d362676b59582d38b2d98c2a70aa2ef
-
SSDEEP
24576:xzPctpwY+ah2WVBg4LaXf2FpgsWaYR6vjn2hiXCYun1M9PHfA1+WkVcem8Avmvgv:VEfR2yBefyqs9Y+Je1aA1+Wh1v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e24bb3edfc3b345f3e42a33fc32062a8.bin
Files
-
e24bb3edfc3b345f3e42a33fc32062a8.bin.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 840KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ywdkawvd Size: 844KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
trinhhyb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE