Static task
static1
Behavioral task
behavioral1
Sample
e04f9f10af61abd4e8dda0b8282448ab9f219a4aefb99f72d7d497a6f833f871.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
e04f9f10af61abd4e8dda0b8282448ab9f219a4aefb99f72d7d497a6f833f871.exe
Resource
win10v2004-20240508-en
General
-
Target
e04f9f10af61abd4e8dda0b8282448ab9f219a4aefb99f72d7d497a6f833f871
-
Size
6.1MB
-
MD5
30364271f8f48d0839aaf8da3e72ac37
-
SHA1
bc5a4adeb2a2ec9d53b7a837f36224fad54afd8a
-
SHA256
e04f9f10af61abd4e8dda0b8282448ab9f219a4aefb99f72d7d497a6f833f871
-
SHA512
32a0053b51862222c0b33a203e1483326e9bf0e7fa8458f193e75d11ca121558ecb90d21a9e23b5a0a0872208caf951bb68d23380e5faea5ad6f47bc311d6254
-
SSDEEP
196608:98kzcbgln4UMpnhhMyAVJCJOJvD7+FKHz87O:9fznlnBMpAtVFJa77O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e04f9f10af61abd4e8dda0b8282448ab9f219a4aefb99f72d7d497a6f833f871
Files
-
e04f9f10af61abd4e8dda0b8282448ab9f219a4aefb99f72d7d497a6f833f871.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 5.0MB - Virtual size: 22.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
igqubmfu Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vzkcjptj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE