Static task
static1
Behavioral task
behavioral1
Sample
e5f28764ba3e0f60f666d468666a3aa108aa05e04cbabd8182a2578c1361f432.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
e5f28764ba3e0f60f666d468666a3aa108aa05e04cbabd8182a2578c1361f432.exe
Resource
win10v2004-20240426-en
General
-
Target
e5f28764ba3e0f60f666d468666a3aa108aa05e04cbabd8182a2578c1361f432
-
Size
3.1MB
-
MD5
d5785fd5fc955ef444d44ed87c56d90e
-
SHA1
69222185bc44dd20939c4cad466a5e992f25cafb
-
SHA256
e5f28764ba3e0f60f666d468666a3aa108aa05e04cbabd8182a2578c1361f432
-
SHA512
c79991215cd8c271b1607b417873269ae61d4119de3702f1c52bc4b71f9d5cea945ba49306a166a7f14aefbcdcb9ceebb38b84c05f3a50a4cfae3cf673e75157
-
SSDEEP
98304:wP0tuavdUDQUtnXS/9+LiVBwmC8ifJnzLPOZMj5Z3pFf:buavdH4ni/9/B1IvPHBpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5f28764ba3e0f60f666d468666a3aa108aa05e04cbabd8182a2578c1361f432
Files
-
e5f28764ba3e0f60f666d468666a3aa108aa05e04cbabd8182a2578c1361f432.exe windows:4 windows x86 arch:x86
4fcb07a0f003a67c79bec37fe7240dd5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
SystemParametersInfoW
advapi32
OpenServiceW
Sections
Size: - Virtual size: 3.0MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE