Static task
static1
Behavioral task
behavioral1
Sample
e16a70e6572b6f8a67bbed7d5a7b987d765acf6a9a89282b80ca0240a71e06a2N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e16a70e6572b6f8a67bbed7d5a7b987d765acf6a9a89282b80ca0240a71e06a2N.exe
Resource
win10v2004-20240802-en
General
-
Target
e16a70e6572b6f8a67bbed7d5a7b987d765acf6a9a89282b80ca0240a71e06a2N
-
Size
201KB
-
MD5
2496e30c5d51ca3c0d52e6f497294000
-
SHA1
9b00e4ec90b7268d15deb2e57440702f88fac15c
-
SHA256
e16a70e6572b6f8a67bbed7d5a7b987d765acf6a9a89282b80ca0240a71e06a2
-
SHA512
728e1e7f32b7851d387e24a07947556e410e6a99651c64f001dfaf01480720115e00253d37c43f1e61c674a0c267c7f8416815d9ff04dfecb83e98f39fd78ef7
-
SSDEEP
6144:SIY6Xcr2BEhGVTPqm8PmeOvQLqykDajpJQPS4:kmEMVWTmeOvnDajpJct
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e16a70e6572b6f8a67bbed7d5a7b987d765acf6a9a89282b80ca0240a71e06a2N
Files
-
e16a70e6572b6f8a67bbed7d5a7b987d765acf6a9a89282b80ca0240a71e06a2N.exe windows:4 windows x86 arch:x86
10c46c32fecd2778d53d07837c6378c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
heat.ray Size: - Virtual size: 392KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
heat.ray Size: 200KB - Virtual size: 200KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE