Static task
static1
Behavioral task
behavioral1
Sample
e837942256d3a66d062bc6673ebe64f00c9591f3080f49756b97f312591dc96eN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e837942256d3a66d062bc6673ebe64f00c9591f3080f49756b97f312591dc96eN.exe
Resource
win10v2004-20240802-en
General
-
Target
e837942256d3a66d062bc6673ebe64f00c9591f3080f49756b97f312591dc96eN.exe
-
Size
749KB
-
MD5
5c0aa5c7890cd2f7316bb6f90f494240
-
SHA1
338107a531bd3777c51393493115e3a8ba507e66
-
SHA256
e837942256d3a66d062bc6673ebe64f00c9591f3080f49756b97f312591dc96e
-
SHA512
8591fc5f5c36b5c0c8cb6da1d29e46ae99bac009d6690548fd0705f4a5b7d4f960999bc5af9113c6c882b5735a5b11f8f39c76f1ec0066ab30cde7f587168787
-
SSDEEP
12288:ckXb1EjpX32NSHZBnkrJov1EiicMD1CF6ixae5HWqnzFGBh:lb1EjINSHnkrJCnGD1CFzxV5DFGBh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e837942256d3a66d062bc6673ebe64f00c9591f3080f49756b97f312591dc96eN.exe
Files
-
e837942256d3a66d062bc6673ebe64f00c9591f3080f49756b97f312591dc96eN.exe.exe windows:4 windows x86 arch:x86
3260af0756adb30bf2da2ef6da3fd7e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetForegroundWindow
IMPSetIMEA
ole32
CreateItemMoniker
kernel32
GetThreadLocale
GetCurrentThread
Sections
.text Size: 481KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 145B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JqUGNMmo Size: 1KB - Virtual size: 1KB
RNomIUFx Size: 512B - Virtual size: 84B
humbOZQz Size: 1KB - Virtual size: 1KB
sVyoFTXj Size: 512B - Virtual size: 180B
yeMOueap Size: 13KB - Virtual size: 13KB
EASSZRwo Size: 512B - Virtual size: 488B
njDBYuGh Size: 512B - Virtual size: 349B
URDKfKmd Size: 1024B - Virtual size: 857B
xtjJJwFh Size: 1024B - Virtual size: 577B
EKtKmnFQ Size: 3KB - Virtual size: 2KB
rBzoijEp Size: 512B - Virtual size: 29B
.vmp0 Size: 2KB - Virtual size: 1KB
zMyJzWTM Size: 512B - Virtual size: 115B
owuDecRo Size: 1024B - Virtual size: 825B
lGUwzlqR Size: 7KB - Virtual size: 6KB
AkXhhuGb Size: 512B - Virtual size: 503B
ZQyPDHJy Size: 512B - Virtual size: 366B
qtHovFxW Size: 512B - Virtual size: 96B
tEzCOPDf Size: 2KB - Virtual size: 2KB
HTMbZdtV Size: 3KB - Virtual size: 2KB
DgqQCTqh Size: 1024B - Virtual size: 594B
EUILgJbU Size: 1KB - Virtual size: 1KB
TpwKNrVQ Size: 1KB - Virtual size: 1KB
cvylduev Size: 1KB - Virtual size: 1KB
KUVVdiJV Size: 512B - Virtual size: 507B
bknzmovm Size: 1KB - Virtual size: 1KB
toWWdpyT Size: 21KB - Virtual size: 20KB
IioRrXFS Size: 2KB - Virtual size: 2KB
CDCrWoSG Size: 512B - Virtual size: 250B
nuVsBWCt Size: 512B - Virtual size: 321B
IaPopAxT Size: 8KB - Virtual size: 7KB
SDSWxcLx Size: 512B - Virtual size: 237B
MtCEBHBT Size: 1024B - Virtual size: 976B
GIlUEZfB Size: 512B - Virtual size: 208B
uuJGqOyW Size: 512B - Virtual size: 507B
xURPyhIB Size: 3KB - Virtual size: 2KB
pZIAOeLK Size: 1KB - Virtual size: 1KB
psSBVgmI Size: 1024B - Virtual size: 752B
SaoNVJOv Size: 4KB - Virtual size: 3KB
RxcWRKDs Size: 1024B - Virtual size: 907B
gNeNCdwq Size: 37KB - Virtual size: 36KB
ckOytkgy Size: 2KB - Virtual size: 2KB
sjegoHnF Size: 512B - Virtual size: 312B
RdjBCCkG Size: 1KB - Virtual size: 1KB
ZHuepmDG Size: 1024B - Virtual size: 632B
vcjlhLlY Size: 3KB - Virtual size: 2KB
UbgRtHes Size: 512B - Virtual size: 89B
DLDdWsCd Size: 2KB - Virtual size: 2KB
YzcCqOLR Size: 1KB - Virtual size: 1KB
IxzpnTOV Size: 512B - Virtual size: 85B
eJXPwyQO Size: 2KB - Virtual size: 1KB
OdpjoihN Size: 3KB - Virtual size: 3KB
NYEiQZXa Size: 1KB - Virtual size: 1KB
tdvWuoPp Size: 3KB - Virtual size: 2KB
JiHOqdOF Size: 512B - Virtual size: 206B
ElGXAYqT Size: 512B - Virtual size: 35B
HTOvPZNs Size: 512B - Virtual size: 186B
mVHseUoJ Size: 512B - Virtual size: 191B
awcXEFkf Size: 512B - Virtual size: 287B
SzSCbfkR Size: 1024B - Virtual size: 805B
RQYhgYmd Size: 1024B - Virtual size: 691B
ncEXYpAj Size: 512B - Virtual size: 40B
gaJGwXEw Size: 512B - Virtual size: 430B
XTSmcJMR Size: 2KB - Virtual size: 2KB
DPbGQkoi Size: 512B - Virtual size: 139B
KrIiDDTk Size: 512B - Virtual size: 49B
AlapQisE Size: 512B - Virtual size: 279B
xFksvuUo Size: 1KB - Virtual size: 1KB
VblMcsYl Size: 512B - Virtual size: 298B
bDHvDgby Size: 512B - Virtual size: 142B
XGgcRyCL Size: 512B - Virtual size: 59B
uAqbiGHy Size: 512B - Virtual size: 110B
HpdnXYDI Size: 1024B - Virtual size: 744B
wmSkoTeM Size: 512B - Virtual size: 142B
rrtfvTUZ Size: 2KB - Virtual size: 1KB
wCQnOKQh Size: 512B - Virtual size: 436B
NtPwAufW Size: 6KB - Virtual size: 5KB
pBVlBzob Size: 512B - Virtual size: 121B
icEWrUsd Size: 4KB - Virtual size: 3KB
ZKlRjtKf Size: 512B - Virtual size: 444B
nttaAOQu Size: 1KB - Virtual size: 1KB
wfpKFLFg Size: 7KB - Virtual size: 6KB
YJXcirjw Size: 5KB - Virtual size: 4KB
OgRNknIF Size: 4KB - Virtual size: 3KB
dEOwjMGQ Size: 2KB - Virtual size: 2KB
TygppJoM Size: 1024B - Virtual size: 834B
TGqASmAS Size: 512B - Virtual size: 437B
PifDtaWC Size: 4KB - Virtual size: 4KB
PAevigsz Size: 512B - Virtual size: 176B
iGhgYwxj Size: 512B - Virtual size: 169B
dltWcvHl Size: 1KB - Virtual size: 1KB
RcNNbhop Size: 2KB - Virtual size: 1KB
HhttbNCh Size: 512B - Virtual size: 17B
ndQsyGqp Size: 512B - Virtual size: 242B
hGLGEqDY Size: 1024B - Virtual size: 761B
oagpvLxO Size: 2KB - Virtual size: 2KB
DaoDqvVF Size: 3KB - Virtual size: 2KB
YQXsuKmx Size: 3KB - Virtual size: 3KB
qqkYiVhZ Size: 512B - Virtual size: 317B
CEfDHWwS Size: 1024B - Virtual size: 648B
irETc? Size: 512B - Virtual size: 256B
.textOBb Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textOBb Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ