Static task
static1
Behavioral task
behavioral1
Sample
e4efdb739997c468ceff3b35891aee00N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e4efdb739997c468ceff3b35891aee00N.exe
Resource
win10v2004-20240802-en
General
-
Target
e4efdb739997c468ceff3b35891aee00N.exe
-
Size
16KB
-
MD5
e4efdb739997c468ceff3b35891aee00
-
SHA1
1b0d60aca3c9a59b6fac71f366f32142d79bcd29
-
SHA256
182a42a15993f112668616f23de428823e46b5d03c2ee1c49fd6ad72cdfe760c
-
SHA512
123442e8b94de897091585813f332769411a9960efe467432665f57c8aefd8c9e1b3324954757255b4c6543e7aba827a000008477231453fae7198e9166d0306
-
SSDEEP
384:9cd6w+NomiUBQZVoRiCKKtYh2pNvdAaurN9:qIomvQ7oTOUVAaurN9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4efdb739997c468ceff3b35891aee00N.exe
Files
-
e4efdb739997c468ceff3b35891aee00N.exe.exe windows:4 windows x86 arch:x86
d212f4856ef91a73d17f9e9cdf7752bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
ClientToScreen
CloseClipboard
PostMessageW
CharLowerW
UpdateWindow
ChangeClipboardChain
kernel32
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetModuleHandleW
HeapAlloc
GetProcessHeap
lstrcatW
HeapFree
lstrcpyW
GetCommandLineA
comctl32
ImageList_Create
ord17
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ