Static task
static1
Behavioral task
behavioral1
Sample
e031fcc2a6bb4c1eae2f89df8e5ae7b0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e031fcc2a6bb4c1eae2f89df8e5ae7b0N.exe
Resource
win10v2004-20240802-en
General
-
Target
e031fcc2a6bb4c1eae2f89df8e5ae7b0N.exe
-
Size
71KB
-
MD5
e031fcc2a6bb4c1eae2f89df8e5ae7b0
-
SHA1
b48e4b74ca61bb2c8b23df8b8fb8ea41722d4582
-
SHA256
7a88edf682b2fbf7ba6af812f7cfc07224ae5d3afb5fe2c88c05cfb7444fd734
-
SHA512
f443a8d835970c1b5863e2fe7c7113f6479cfadd9d7e7756d59901d666d6b293d53c3c44beeeddcf922c9de606e03a0417a871094a47073ef747c0c79f97ed62
-
SSDEEP
1536:26IVt7ag6f3axa4pJngzduUBD788LMhlojEZYwdf6Iyf/:XIVt72Ks4pJngzwUBPB4bPZYwdf9k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e031fcc2a6bb4c1eae2f89df8e5ae7b0N.exe
Files
-
e031fcc2a6bb4c1eae2f89df8e5ae7b0N.exe.exe windows:4 windows x86 arch:x86
9db85b58f1193567a2aa95c8fab29bfa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
CopyFileA
ExitProcess
GetPrivateProfileIntA
GetModuleFileNameA
LocalFree
LocalAlloc
GetFileAttributesA
FindFirstFileA
GetACP
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetPrivateProfileSectionA
SetFileAttributesA
GetWindowsDirectoryA
GetSystemDirectoryA
WideCharToMultiByte
HeapFree
GetOEMCP
GetStringTypeA
GetCPInfo
WriteFile
lstrlenA
VirtualFree
MoveFileExA
GetProcessHeap
HeapAlloc
WritePrivateProfileSectionA
lstrcmpiA
GetVersionExA
lstrcpyA
lstrcatA
LoadLibraryA
VirtualAlloc
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapCreate
RtlUnwind
FreeEnvironmentStringsA
GetStringTypeW
MultiByteToWideChar
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
user32
ReleaseDC
wsprintfA
PostMessageA
GetDC
gdi32
GetFontData
DeleteObject
SelectObject
AddFontResourceA
EnumFontFamiliesExA
CreateFontIndirectA
advapi32
RegQueryValueExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegCloseKey
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE