Static task
static1
Behavioral task
behavioral1
Sample
ec4abd798c1ba1ba8dcf78ea969598cf0ce908d4a1d168aa01478fd0885ef0f8.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ec4abd798c1ba1ba8dcf78ea969598cf0ce908d4a1d168aa01478fd0885ef0f8.exe
Resource
win10v2004-20240508-en
General
-
Target
ec4abd798c1ba1ba8dcf78ea969598cf0ce908d4a1d168aa01478fd0885ef0f8
-
Size
14.7MB
-
MD5
0b6efe2667bcc6705a419bd1713334d9
-
SHA1
1cd25a33a4916472533aad4ef920d724b0834abd
-
SHA256
ec4abd798c1ba1ba8dcf78ea969598cf0ce908d4a1d168aa01478fd0885ef0f8
-
SHA512
8642fcea037358a9c3fe6d25f2256660341073bf9fa24de87bff7a1214be3cc4e3545e036ba80a661635ad9bd1c997e389ea70366d8b8ddb3149d74ae1dbeb84
-
SSDEEP
196608:HzUTES1fKfbcpAczkHBtS/FWuBX92JXP3OA2Dvqq+ojliuyY14KTNBf/:4j1fKfTcOHuMmA2zqU/Bf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec4abd798c1ba1ba8dcf78ea969598cf0ce908d4a1d168aa01478fd0885ef0f8
Files
-
ec4abd798c1ba1ba8dcf78ea969598cf0ce908d4a1d168aa01478fd0885ef0f8.exe windows:5 windows x86 arch:x86
d294ae5e09aea63b98615d78dc12858b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
LoadIconA
CharUpperBuffW
gdi32
GetTextMetricsA
winmm
midiStreamRestart
winspool.drv
DocumentPropertiesA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
recv
comdlg32
GetSaveFileNameA
Sections
Upx Size: - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Upx Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Upx Size: - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Upx Size: - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Upx Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Upx Size: 12.1MB - Virtual size: 12.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Upx Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Upx Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Upx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Upx Size: 577KB - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Upx Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ