Static task
static1
Behavioral task
behavioral1
Sample
e88d42c2964d202a7e3db0d00c48c1736e932ba2ff787cb5e69a9308f1687b11.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e88d42c2964d202a7e3db0d00c48c1736e932ba2ff787cb5e69a9308f1687b11.exe
Resource
win10v2004-20240802-en
General
-
Target
e88d42c2964d202a7e3db0d00c48c1736e932ba2ff787cb5e69a9308f1687b11
-
Size
13.7MB
-
MD5
9f626f532a12c90d58aec9ff7eb8b99f
-
SHA1
91abef0d0d272723020c98a27cf6db5f06cf5d12
-
SHA256
e88d42c2964d202a7e3db0d00c48c1736e932ba2ff787cb5e69a9308f1687b11
-
SHA512
e271c0a700112246cfcfe7785b7c1a14a252cea786f2ade2c9dec70603791924787e3790b6759da05480c41848e752b5be1d5071b9947856e52aff277521dc58
-
SSDEEP
393216:Iw1k6MxoVQ3Mk2B6wMdPOpnpyIr/9m7GYvBWUh0Ph6TLgI2DxAw:xooqckGMar/9u7WbPMwRaw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e88d42c2964d202a7e3db0d00c48c1736e932ba2ff787cb5e69a9308f1687b11
Files
-
e88d42c2964d202a7e3db0d00c48c1736e932ba2ff787cb5e69a9308f1687b11.exe windows:5 windows x86 arch:x86
86d2c0a1c9bd231a5246472b7305fa9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
LoadIconA
gdi32
GetTextMetricsA
winmm
waveOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Read
ws2_32
inet_ntoa
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmps0 Size: - Virtual size: 7.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmps1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmps2 Size: 13.6MB - Virtual size: 13.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ