Static task
static1
Behavioral task
behavioral1
Sample
e7dab33408771a19654653dd537c074c36b5f8a87f4ed6a0f430429c84f5f811.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
e7dab33408771a19654653dd537c074c36b5f8a87f4ed6a0f430429c84f5f811.exe
Resource
win10v2004-20240611-en
General
-
Target
e7dab33408771a19654653dd537c074c36b5f8a87f4ed6a0f430429c84f5f811
-
Size
841KB
-
MD5
a388c052791be829f79cb5fdd8779090
-
SHA1
6c8a076dcb5ebf0814c64044b780eef6b4272d28
-
SHA256
e7dab33408771a19654653dd537c074c36b5f8a87f4ed6a0f430429c84f5f811
-
SHA512
f3934f06d8cbfaa8a716a71d562eb6832cc9ca738c37c1069065b0428b2625273e0be2e2fc5167e3d9557100e4eb1c84229de72e1b2b41f8750ab1c3de805ac6
-
SSDEEP
12288:WnWhkqE5amcmAbWrf7OrNiSStDgYRht8VsiUItr/Tc/RvO:Wn6kxaOAbK7fZJxRvyrUR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7dab33408771a19654653dd537c074c36b5f8a87f4ed6a0f430429c84f5f811
Files
-
e7dab33408771a19654653dd537c074c36b5f8a87f4ed6a0f430429c84f5f811.exe windows:6 windows x86 arch:x86
c6852b73519a9fbe18c43ea43b89f434
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextAlign
DeleteObject
RestoreDC
SetBkMode
SetTextColor
GetTextExtentPoint32W
TextOutW
DeleteDC
CreateFontW
CreateCompatibleDC
SelectObject
SaveDC
CreateCompatibleBitmap
BitBlt
winhttp
WinHttpOpen
WinHttpAddRequestHeaders
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpReceiveResponse
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpWriteData
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpConnect
WinHttpCrackUrl
WinHttpCloseHandle
kernel32
SetEndOfFile
WriteConsoleW
CreateFileW
FlushFileBuffers
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
HeapFree
CreateMutexW
InitializeCriticalSectionEx
ReleaseMutex
HeapSize
MultiByteToWideChar
GetLastError
GlobalFree
HeapReAlloc
CloseHandle
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
GetTickCount
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetExitCodeThread
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
WideCharToMultiByte
IsDebuggerPresent
OutputDebugStringW
FindClose
GetConsoleCP
GetFileType
ReadConsoleW
GetConsoleMode
SetFilePointerEx
LCMapStringW
WriteFile
GetStdHandle
ExitProcess
GetModuleHandleExW
ExitThread
ReadFile
RtlUnwind
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
LoadLibraryExW
GetModuleHandleA
GetModuleFileNameW
FreeLibraryAndExitThread
FreeLibrary
SetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
TerminateProcess
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
EncodePointer
GetThreadTimes
user32
LoadCursorW
LoadIconW
TranslateMessage
RegisterClassW
DispatchMessageW
SetWindowTextW
SetCursor
SendMessageW
CreateWindowExW
FillRect
DefWindowProcW
InvalidateRect
EndPaint
PostQuitMessage
GetClientRect
ShowWindow
GetMessageW
BeginPaint
shell32
ShellExecuteW
shlwapi
ord12
gdiplus
GdipCreateBitmapFromScan0
GdipLoadImageFromStream
GdipGetImageWidth
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipFree
GdipScaleWorldTransform
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipGetImageHeight
GdipLoadImageFromFile
GdiplusShutdown
GdiplusStartup
GdipDrawImageI
Sections
.text Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 551KB - Virtual size: 551KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ