Static task
static1
Behavioral task
behavioral1
Sample
ef2c7563ee9134a397f8537a865d8510N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef2c7563ee9134a397f8537a865d8510N.exe
Resource
win10v2004-20240802-en
General
-
Target
ef2c7563ee9134a397f8537a865d8510N.exe
-
Size
402KB
-
MD5
ef2c7563ee9134a397f8537a865d8510
-
SHA1
b078bed7a6b255809b5cb0e04262b7adbd0fdf2b
-
SHA256
c6c5adf201acff226226adc01cbffecbafdcb2bc2e7e059628a37d8eaa1b90c8
-
SHA512
18adcd69ea119d45d266a4bbfe61278e0c6b461426899da43e6c400af5716fc8f7e05c2be1b027c753eee47302fa7f1328a64aaf0e344f1596dcbccea199eaf6
-
SSDEEP
6144:iqye+d6+Dy91aq9VvyGsmt6TozPMwH6FuDbZ226NGWwHl2FvBxm7ciz4D7:ce+dbU1xy/m0TW/Nl36Cl2vW7c/7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef2c7563ee9134a397f8537a865d8510N.exe
Files
-
ef2c7563ee9134a397f8537a865d8510N.exe.exe windows:5 windows x86 arch:x86
9377ee919a7e76defe2c1216c4ff0a01
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowLongW
FindWindowW
InvalidateRect
clusapi
ClusterNetworkEnum
mprapi
MprAdminConnectionClearStats
MprAdminServerConnect
pdh
PdhGetCounterTimeBase
PdhGetRawCounterValue
PdhCloseQuery
msvcrt
memcpy
sprintf
puts
rename
remove
wcscspn
wcsncmp
swscanf
wcstoul
fputws
getchar
printf
oleaut32
VarCyFromI1
kernel32
GetUserDefaultLCID
CreateNamedPipeA
TerminateThread
EnumSystemCodePagesA
DuplicateHandle
AssignProcessToJobObject
ExitProcess
GetCommandLineW
GetProcAddress
GetModuleHandleW
VirtualQueryEx
GetProcessTimes
GetCurrentThread
SetConsoleOutputCP
CreateWaitableTimerA
GetVolumeInformationW
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rrdata Size: 33KB - Virtual size: 339KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE