Static task
static1
Behavioral task
behavioral1
Sample
se.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
se.exe
Resource
win10-20240611-en
Behavioral task
behavioral3
Sample
se.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral4
Sample
se.exe
Resource
win11-20240709-en
General
-
Target
se.exe
-
Size
148KB
-
MD5
a907d2e6edda829467a10bc8a87cb76f
-
SHA1
8cdd658a350750a2c95eed87a20fe8a22159c50a
-
SHA256
0822d4c51c466544072ac07dd5c2dbf4143431fb6955a05911600fed50d0229a
-
SHA512
1b1e572bfc3e4fca866a97936ed96d2d78890fc85c405e41946964312f492578b335c6433c4ed511d3eccb7f7529b4ec3f07786a89aeb7483378f9ec836cf376
-
SSDEEP
3072:UGcq9cj1PWP87STe10+aKObk8gqSCpIHk5qYQ6b39VGKaSg:UJq9cj1u87STeq+aZk89iE9DGxSg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource se.exe
Files
-
se.exe.exe windows:6 windows x64 arch:x64
1efa1310f9268b62f071617d0730aefa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateFileA
CloseHandle
GetComputerNameA
GetLastError
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
GetCurrentThreadId
LockFile
UnlockFile
OpenFileMappingA
CreateNamedPipeA
WaitNamedPipeA
ExitProcess
VirtualAlloc
GetLocalTime
opengl32
glNewList
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ