Static task
static1
Behavioral task
behavioral1
Sample
e2fa01009d3f09310fc1f0c2b3d0140601df94e599cc9158445481475fcd0fc7N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e2fa01009d3f09310fc1f0c2b3d0140601df94e599cc9158445481475fcd0fc7N.exe
Resource
win10v2004-20240802-en
General
-
Target
e2fa01009d3f09310fc1f0c2b3d0140601df94e599cc9158445481475fcd0fc7N.exe
-
Size
394KB
-
MD5
e8c3d37a361618f47c5ffb64eb36eb70
-
SHA1
9b3ea0485b46cfebe134e77470d8197e1653b0a3
-
SHA256
e2fa01009d3f09310fc1f0c2b3d0140601df94e599cc9158445481475fcd0fc7
-
SHA512
a3a72d187347d1914ae61215ab799017d69be014a4994199e3060f9a8daf045ef1ce6bf0837f28658eea1fb5f9c500077091e9ef1bca01fa3ae258e7aaa0caa6
-
SSDEEP
6144:wWUKFNBG6AxLhfW2CWEXjnwP3bBcf8Xk64Wh2JQCEwZuGHeoWZX2rpPQMfb:wWUKFvG6q1f3WjGQ8063Uh5j0X21Qob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2fa01009d3f09310fc1f0c2b3d0140601df94e599cc9158445481475fcd0fc7N.exe
Files
-
e2fa01009d3f09310fc1f0c2b3d0140601df94e599cc9158445481475fcd0fc7N.exe.exe windows:4 windows x86 arch:x86
6d40fd66a3c652c2e09675d7197fcc9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
LoadLibraryA
LocalAlloc
GetModuleHandleA
Sleep
LoadResource
GetSystemTime
FindResourceA
GetVersion
SuspendThread
CreateThread
FreeResource
SizeofResource
LockResource
FindResourceExA
VirtualFree
SetLastError
CloseHandle
LocalLock
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
LocalFree
GetProcAddress
VirtualAlloc
GetACP
GetCPInfo
GetLastError
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetStringTypeW
user32
MessageBoxA
IsWindowVisible
FindWindowA
EnableWindow
GetDC
LoadBitmapA
GetDesktopWindow
gdi32
GetObjectA
DeleteObject
ole32
CoUninitialize
avifil32
AVIBuildFilterA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 324KB - Virtual size: 325KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 417KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ