Static task
static1
Behavioral task
behavioral1
Sample
e2d23e698ab80f6945e034b0ddbcefb59a3afc7e30d59b393e4481df55800af3.exe
Resource
win7-20240903-en
General
-
Target
e2d23e698ab80f6945e034b0ddbcefb59a3afc7e30d59b393e4481df55800af3
-
Size
302KB
-
MD5
1493d42494ac3ede934f707489064704
-
SHA1
928ad3af445c99e8d4cbddb0f3bcac9cd9934ac4
-
SHA256
e2d23e698ab80f6945e034b0ddbcefb59a3afc7e30d59b393e4481df55800af3
-
SHA512
3f526b0ba2118fe333fbae26b252fce3dd601d19d38fd8e2cc4b75e2c0d396cab26916bd7fe4e66cf5b7f4cb4c3243006f91e9882674d5d82242c2d39b175002
-
SSDEEP
3072:kLihaKzMrehykeA1yfCxvO4vIesYCbCOTMxLe5RvXVYz3M5LSxZ2Hzaej:kLioAMrehyk3yalJIDdCZWvFYc5+i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2d23e698ab80f6945e034b0ddbcefb59a3afc7e30d59b393e4481df55800af3
Files
-
e2d23e698ab80f6945e034b0ddbcefb59a3afc7e30d59b393e4481df55800af3.exe windows:5 windows x86 arch:x86
34be36055d1ce88f861f9fd629998faa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
FillConsoleOutputCharacterA
GetNumaNodeProcessorMask
GetConsoleAliasExesLengthA
OpenJobObjectA
QueryDosDeviceA
GetComputerNameW
GetNumaAvailableMemoryNode
SleepEx
FreeEnvironmentStringsA
GetModuleHandleW
GetConsoleAliasesLengthA
GetPriorityClass
GetEnvironmentStrings
FatalAppExitW
SetSystemTimeAdjustment
WriteConsoleOutputA
GetFileAttributesA
HeapCreate
SetConsoleMode
GetModuleFileNameW
GetBinaryTypeW
SetConsoleTitleA
GetShortPathNameA
GetStdHandle
GetLastError
GetCommandLineW
SearchPathA
OpenWaitableTimerA
LoadLibraryA
InterlockedExchangeAdd
LocalAlloc
SetCalendarInfoW
MoveFileA
SetCommMask
FindAtomA
FoldStringA
WaitForMultipleObjects
CreatePipe
GetDefaultCommConfigA
GetModuleHandleA
FreeEnvironmentStringsW
BuildCommDCBA
PurgeComm
WaitForDebugEvent
GlobalReAlloc
CopyFileExA
GetVolumeInformationW
CreateFileA
GetProcAddress
DebugActiveProcess
HeapFree
Sleep
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
WriteFile
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
ReadFile
GetLocaleInfoA
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
GetUserObjectInformationW
SetFocus
advapi32
ObjectPrivilegeAuditAlarmA
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ