Static task
static1
Behavioral task
behavioral1
Sample
e8f8e53fde0ed99ecc1125117c93da37b6cfe109856c06813eb6158828b9e5fd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8f8e53fde0ed99ecc1125117c93da37b6cfe109856c06813eb6158828b9e5fd.exe
Resource
win10v2004-20240508-en
General
-
Target
e8f8e53fde0ed99ecc1125117c93da37b6cfe109856c06813eb6158828b9e5fd
-
Size
7.6MB
-
MD5
4af44c5a2efda5dac8270ecbfc562f99
-
SHA1
856950f105486a7818a528ace4801429618e13d8
-
SHA256
e8f8e53fde0ed99ecc1125117c93da37b6cfe109856c06813eb6158828b9e5fd
-
SHA512
d76413355cc49592003aafd41656cfc36b224934286086911630ae77ba2f6ae259090bcf0597df738b71aa24716426b4077f849d467f9172716b6d0635138c49
-
SSDEEP
196608:YOoZ1kRWnUn7ahWoGOl9jsfu2K6JlsRK87LFRNj:YOoXkYWm9jaJSRX7xD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8f8e53fde0ed99ecc1125117c93da37b6cfe109856c06813eb6158828b9e5fd
Files
-
e8f8e53fde0ed99ecc1125117c93da37b6cfe109856c06813eb6158828b9e5fd.exe windows:4 windows x86 arch:x86
d0fbc941486e7eb0a5167b9f6b8b40d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
winmm
midiStreamOut
ws2_32
htons
user32
ScreenToClient
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
LHashValOfNameSys
comctl32
ImageList_GetImageCount
comdlg32
ChooseColorA
secur32
GetUserNameExA
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE