Static task
static1
Behavioral task
behavioral1
Sample
ebb2e0ed088eb0195bd8d42182611da1ccc769e13af471f9be8daabe6602c372.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ebb2e0ed088eb0195bd8d42182611da1ccc769e13af471f9be8daabe6602c372.exe
Resource
win10-20240404-en
General
-
Target
ebb2e0ed088eb0195bd8d42182611da1ccc769e13af471f9be8daabe6602c372
-
Size
256KB
-
MD5
1ba9819840e76441fce804d83b45fd45
-
SHA1
37c1d536837a0305660be573127fb474936f1205
-
SHA256
ebb2e0ed088eb0195bd8d42182611da1ccc769e13af471f9be8daabe6602c372
-
SHA512
5069be7e4ae37075b9cf875ce333fe33936bc5e13079367775d364d083c807e2cc04ee7f64bdf217b3e6edf0f75c3e0d574f567fc8dd5ddb2a932ab1d11d1d2a
-
SSDEEP
3072:jJse40OPrMYSeg+sPN0D42i5zqUbcoA1NTT6KW3R:mGOPrMYSeg+s10D47tqUlEvW3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebb2e0ed088eb0195bd8d42182611da1ccc769e13af471f9be8daabe6602c372
Files
-
ebb2e0ed088eb0195bd8d42182611da1ccc769e13af471f9be8daabe6602c372.exe windows:5 windows x86 arch:x86
40585a2830158a9dd30dce20d7448027
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateJobObjectW
CreateHardLinkA
GetProcessPriorityBoost
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
GetNumberFormatA
EnumTimeFormatsW
EnumResourceTypesA
GetConsoleCP
GlobalAlloc
GetSystemDirectoryW
SetFileShortNameW
LoadLibraryW
IsProcessInJob
FatalAppExitW
IsBadCodePtr
SetVolumeMountPointA
HeapValidate
GetModuleFileNameW
ReplaceFileA
LCMapStringA
GetLastError
SetLastError
GetProcAddress
SetEnvironmentVariableW
PeekConsoleInputW
CreateNamedPipeA
VerLanguageNameW
LoadLibraryA
CreateFileMappingA
SetConsoleCtrlHandler
AddAtomA
HeapWalk
GetOEMCP
EnumDateFormatsA
GetModuleHandleA
EnumResourceNamesA
SetProcessShutdownParameters
GetDiskFreeSpaceExA
LCMapStringW
HeapSize
WriteConsoleW
FlushFileBuffers
SetStdHandle
EnumCalendarInfoW
LocalCompact
WriteConsoleInputW
GlobalCompact
FindVolumeMountPointClose
CreateFileA
CreateFileW
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapAlloc
ExitProcess
SetFilePointer
HeapCreate
HeapFree
CloseHandle
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
Sleep
RaiseException
GetConsoleMode
RtlUnwind
ReadFile
user32
GetMessageExtraInfo
ChangeMenuA
GetMenu
DrawStateW
GetSysColorBrush
DrawMenuBar
SetCaretPos
CharUpperBuffA
gdi32
GetCharWidthI
CreateDCA
GetCharABCWidthsI
advapi32
RegisterEventSourceW
msimg32
AlphaBlend
Sections
.text Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cefezum Size: 1024B - Virtual size: 723B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wuxu Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ