Static task
static1
Behavioral task
behavioral1
Sample
ea8e15bdd9ad7db7e534d87ccc29e634a11ba5e7a9ae2751936e166f6c1ca503N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea8e15bdd9ad7db7e534d87ccc29e634a11ba5e7a9ae2751936e166f6c1ca503N.exe
Resource
win10v2004-20240802-en
General
-
Target
ea8e15bdd9ad7db7e534d87ccc29e634a11ba5e7a9ae2751936e166f6c1ca503N
-
Size
84KB
-
MD5
c9cc6235ba4715eb02d766c3a51c47d0
-
SHA1
b68befd2e1846dacbea706fc890e0f9eba46c9cf
-
SHA256
ea8e15bdd9ad7db7e534d87ccc29e634a11ba5e7a9ae2751936e166f6c1ca503
-
SHA512
d397c4aa68c5fd9085f41f37cfc6e72f09ceb11118ff4c3b993dd4d0de030b1789a5a9ce19b4a866ca73ba9dbab7f86dc97156ac627f02f32c66c40dc2e0e298
-
SSDEEP
768:1BoQvRfV9JDGZ6mTjlYD9a01tQ5v7EvwNyKiZ4JK+aSswOiCA3b/n2rg3tlAoVHG:1B/TB8NTskQqJ7E4kS96xAT2qvIbP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea8e15bdd9ad7db7e534d87ccc29e634a11ba5e7a9ae2751936e166f6c1ca503N
Files
-
ea8e15bdd9ad7db7e534d87ccc29e634a11ba5e7a9ae2751936e166f6c1ca503N.exe windows:5 windows x86 arch:x86
210ed499f5d4268a25a329f03803bee4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelIo
DeleteFileW
GlobalLock
FindAtomA
GetModuleHandleA
DeleteFileW
LocalFree
GetFileTime
GetLocalTime
GetStartupInfoW
CreateDirectoryA
GetConsoleMode
CreateFileW
GetFileAttributesA
HeapDestroy
GetCurrentThreadId
LeaveCriticalSection
CreateFileW
GetModuleFileNameA
GetProcessHeap
InterlockedExchange
VirtualProtect
ReadConsoleW
GetConsoleAliasW
GetDriveTypeA
user32
IsZoomed
DispatchMessageA
GetSysColor
GetWindowLongA
IsWindowEnabled
LoadCursorA
MessageBoxA
wsprintfA
GetWindowDC
GetWindowTextA
PeekMessageA
GetWindowLongA
GetKeyState
davclnt
DllCanUnloadNow
NPGetCaps
NPCloseEnum
DllGetClassObject
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE