Static task
static1
Behavioral task
behavioral1
Sample
e9652ef869194ec2b5a63386e7998a36dbded937636d9522804bf0050cb8a1d3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9652ef869194ec2b5a63386e7998a36dbded937636d9522804bf0050cb8a1d3.exe
Resource
win10v2004-20240226-en
General
-
Target
e9652ef869194ec2b5a63386e7998a36dbded937636d9522804bf0050cb8a1d3
-
Size
3.1MB
-
MD5
62dd406eaf257bf418e7e6dd57d3cf6e
-
SHA1
f4bbc7b24f72637742ec80ee242ba8785b6d889b
-
SHA256
e9652ef869194ec2b5a63386e7998a36dbded937636d9522804bf0050cb8a1d3
-
SHA512
e7cac712e83b6600c5a4976b683fed157a1cb6c55437a891bb2a5dcabc74b7f3329e9186892bb68d2b68f0a4a6d0b8951e93aaf627270101f58abd6ae96a2d6c
-
SSDEEP
49152:+7iiO3T/jgRWbeS1chc8fbglNjeWxqkikf3DaNuT9wF2ZadJGY8dKHsLktui13EK:NnggbL1cXf0lNZLZONu5UGIUiyK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9652ef869194ec2b5a63386e7998a36dbded937636d9522804bf0050cb8a1d3
Files
-
e9652ef869194ec2b5a63386e7998a36dbded937636d9522804bf0050cb8a1d3.exe windows:4 windows x86 arch:x86
4fcb07a0f003a67c79bec37fe7240dd5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
SystemParametersInfoW
advapi32
OpenServiceW
Sections
Size: - Virtual size: 3.0MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE