Static task
static1
Behavioral task
behavioral1
Sample
e09a290db581d99dd6154ca6df5c9a80N.exe
Resource
win7-20240704-en
General
-
Target
e09a290db581d99dd6154ca6df5c9a80N.exe
-
Size
236KB
-
MD5
e09a290db581d99dd6154ca6df5c9a80
-
SHA1
deed517f44e03dd96b43ab34a8c57b996707e15d
-
SHA256
6fb774a164351805db37cc3fe6218226732aa91cf03cb915b85b3d76a3563d36
-
SHA512
67a2dbf1d5e72562a6c6825c5cd2d060b7ddb09c9463eb525e558bbe45b4c0ded3e0daa961bf54e338523ba1e69a03fc96f81956a9b51e7159a6acbe256d6285
-
SSDEEP
6144:h7mqcWxc5tTBsJWKFGUOfCQfaCR9zkO1shD:Rhpxc5tTG7FE6QfbR9zkYi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e09a290db581d99dd6154ca6df5c9a80N.exe
Files
-
e09a290db581d99dd6154ca6df5c9a80N.exe.exe windows:4 windows x86 arch:x86
8ee1d6ac14557b768dcccdd9bb83afc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleW
GetEnvironmentVariableW
GetLastError
CreateDirectoryW
FindClose
FindFirstFileW
CloseHandle
CreateFileW
FreeLibrary
OpenProcess
WideCharToMultiByte
TerminateProcess
GetCommandLineW
GetModuleFileNameW
CreateProcessW
lstrlenW
GetTempPathW
GetModuleHandleA
GetOEMCP
GetACP
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
LoadLibraryA
IsBadReadPtr
HeapFree
DeleteFileW
GetTempFileNameW
CopyFileW
RtlUnwind
InterlockedDecrement
InterlockedIncrement
RaiseException
GetStartupInfoW
GetVersion
ExitProcess
HeapReAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
GetModuleFileNameA
SetFilePointer
ReadFile
IsBadCodePtr
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
shell32
CommandLineToArgvW
psapi
GetModuleFileNameExW
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE