Static task
static1
Behavioral task
behavioral1
Sample
e36cf24e115c6037a06cf4049eb709e52f5c251536511cde5b0e895ddb63bed4.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
e36cf24e115c6037a06cf4049eb709e52f5c251536511cde5b0e895ddb63bed4.exe
Resource
win10v2004-20240226-en
General
-
Target
e36cf24e115c6037a06cf4049eb709e52f5c251536511cde5b0e895ddb63bed4
-
Size
736KB
-
MD5
5ac5f9de9435005578f20b8ee04f6a3b
-
SHA1
a0b0ade74646a241317857b7de6d50bb255dae11
-
SHA256
e36cf24e115c6037a06cf4049eb709e52f5c251536511cde5b0e895ddb63bed4
-
SHA512
38c47d68556a3f6a981fd7cca180e2b2939f488a66d565fd5b57a0f9947193f7afc10c22ca84bdbcff73a13c0e6e417abf920039c16ebe34c25a180f42d2a953
-
SSDEEP
12288:T8ZNRevAHWjWYu/0em4BQ/BIFhSMXllZaEFA:T8uA2qTVm4uBIFhSMXluEFA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e36cf24e115c6037a06cf4049eb709e52f5c251536511cde5b0e895ddb63bed4
Files
-
e36cf24e115c6037a06cf4049eb709e52f5c251536511cde5b0e895ddb63bed4.exe windows:6 windows x86 arch:x86
229170ec554ed175fb03a63a3e65ec3f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
d2d1
ord1
dwrite
DWriteCreateFactory
api-ms-win-shcore-scaling-l1-1-1
GetProcessDpiAwareness
GetDpiForMonitor
shell32
ShellExecuteW
DragFinish
DragAcceptFiles
DragQueryFileW
comctl32
InitCommonControlsEx
ord345
ole32
CoCreateInstance
CoTaskMemFree
CoGetObjectContext
CoGetApartmentType
CoUninitialize
CoInitialize
kernel32
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
InitializeCriticalSectionEx
GetLastError
HeapSetInformation
DecodePointer
DeleteCriticalSection
ReadFile
GetFileSizeEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
CreateFileW
GetFileAttributesW
GetCurrentThreadId
OpenProcess
GlobalAlloc
CloseHandle
RaiseException
GlobalLock
GetCurrentProcessId
GetModuleHandleW
MulDiv
GetFileInformationByHandleEx
WriteFile
DeleteFileW
MoveFileExW
GetFinalPathNameByHandleW
GetModuleFileNameW
MultiByteToWideChar
FormatMessageW
LocalFree
GetStringTypeW
SetFilePointerEx
SetEndOfFile
ReadConsoleW
LCMapStringW
HeapReAlloc
HeapSize
GetFileType
GetStdHandle
ExitProcess
GetCPInfo
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
EncodePointer
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
OutputDebugStringW
IsDebuggerPresent
CloseThreadpoolWork
IsProcessorFeaturePresent
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
WriteConsoleW
GetModuleHandleExW
FormatMessageA
GetLocaleInfoEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
InitOnceComplete
InitOnceBeginInitialize
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetProcAddress
WideCharToMultiByte
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
GetSystemMenu
GetKeyState
LoadMenuW
CallWindowProcW
MonitorFromPoint
GetWindowRect
DestroyWindow
SetWindowPos
MessageBoxW
GetDpiForWindow
CreateWindowExW
ScreenToClient
SendMessageW
SetWindowTextW
MessageBeep
RegisterClassExW
GetWindowPlacement
GetSubMenu
GetWindowLongW
CloseClipboard
EmptyClipboard
ValidateRect
DestroyMenu
ChangeWindowMessageFilter
LoadIconW
SetForegroundWindow
InsertMenuW
SetClipboardData
SetWindowLongW
TrackPopupMenuEx
GetClientRect
PostQuitMessage
EnableMenuItem
GetClassInfoExW
InvalidateRect
GetCursorPos
GetMessageW
UnregisterClassW
ShowWindow
DispatchMessageW
TranslateMessage
UpdateWindow
DefWindowProcW
OpenClipboard
LoadCursorW
gdi32
GetObjectW
DeleteObject
CreateSolidBrush
CreateFontIndirectW
SetBkMode
SetTextColor
GetStockObject
comdlg32
ChooseColorW
Sections
.text Size: 450KB - Virtual size: 449KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ