Static task
static1
Behavioral task
behavioral1
Sample
e4829a2ba25b617436f7c9a6c18bbfd0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e4829a2ba25b617436f7c9a6c18bbfd0N.exe
Resource
win10v2004-20240802-en
General
-
Target
e4829a2ba25b617436f7c9a6c18bbfd0N.exe
-
Size
56KB
-
MD5
e4829a2ba25b617436f7c9a6c18bbfd0
-
SHA1
0c34df2023dad2570737fc39a1619360558b4b69
-
SHA256
37121f72af113a2451534dc3d41a49b98a1925dc9ce0050393bdc4b701f55e0e
-
SHA512
02e1fa4a73156fb1ddac1217fbbabe680e60fc6ad7d322a7b39d9bf030ff3801c68abf216e6f7397dad673b9bf6eb2309428b64142287689e92ff3662c70795b
-
SSDEEP
768:OxDDu543WHaNgBOrh2A3xGyYwwXKVZ4HCgROQLiB9R1COdl0YHoLc:mDS543WJOLwUq98DC2og
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4829a2ba25b617436f7c9a6c18bbfd0N.exe
Files
-
e4829a2ba25b617436f7c9a6c18bbfd0N.exe.exe windows:4 windows x86 arch:x86
c5c8f8fa071253aa491da5b61e464079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WaitForSingleObject
Sleep
CreateDirectoryA
GetTempPathA
GetModuleFileNameA
LCMapStringA
SetEndOfFile
LoadLibraryA
GetOEMCP
GetLastError
DeleteFileA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
WriteFile
ReadFile
GetProcAddress
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
LCMapStringW
shell32
ShellExecuteExA
winmm
timeGetTime
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ