Static task
static1
Behavioral task
behavioral1
Sample
EXEJoiner.exe
Resource
win10v2004-20240611-en
General
-
Target
EXEJoiner.exe
-
Size
27.6MB
-
MD5
fe50f668ff128374713dcb585145b836
-
SHA1
98bdaa0d214a5bec49d50c51588bd533eaf6180f
-
SHA256
b1bfc6129856a03e1d2ebed4ad604da1309ce9c2387c210a4729f2380a818d0b
-
SHA512
da33a3a4ff7f87407245a14d3f75243c9804595fc766d41e7c1f625b186d61b25cb857efcee1498ae6f46684989b02bf947e6ae5c622b65b4897b564538c83c1
-
SSDEEP
786432:WAtYUg1GguMpfRT3OYcTNE2DFpYzQTFTzM:WCaZBf8YMN5FZTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EXEJoiner.exe
Files
-
EXEJoiner.exe.exe windows:5 windows x86 arch:x86
Password: yeet
5bd8c9d31da3c0696cda7249bba5b2c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
TlsSetValue
GetVersionExA
GetVersion
Sleep
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
GetKeyboardType
CreateWindowExA
advapi32
RegQueryValueExA
RegSetValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
OleUninitialize
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
SHGetSpecialFolderLocation
wsock32
WSACleanup
Sections
CODE Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 29KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.04, Size: - Virtual size: 16.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.6&e Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.]8X Size: 27.6MB - Virtual size: 27.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ