Static task
static1
Behavioral task
behavioral1
Sample
e3cee3ed71d35321288e0af940a953f101d5472a9264cead36d0010586c175c3N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e3cee3ed71d35321288e0af940a953f101d5472a9264cead36d0010586c175c3N.exe
Resource
win10v2004-20240910-en
General
-
Target
e3cee3ed71d35321288e0af940a953f101d5472a9264cead36d0010586c175c3N
-
Size
382KB
-
MD5
0a801bf62f8f462057cea0efc70132d0
-
SHA1
0a1de37c27b6ffc47cc8910d41a2866ac00d31d1
-
SHA256
e3cee3ed71d35321288e0af940a953f101d5472a9264cead36d0010586c175c3
-
SHA512
b7b2b576d620730773a5a6364cdcd6cb055458b0cc84380c46d4c83545065a142c3d8761b1b8821735abc19261fc49c293ebb59525c40897f73a5ee5f3636e28
-
SSDEEP
6144:7+XKRM16y4+AGeJKiIdDjky49jypOAEWZqnKET5EIyLjRKg1gXVJiObl:7vRM1pAGliLy8hAEWZ+7TSHRKSgFBl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3cee3ed71d35321288e0af940a953f101d5472a9264cead36d0010586c175c3N
Files
-
e3cee3ed71d35321288e0af940a953f101d5472a9264cead36d0010586c175c3N.exe windows:4 windows x86 arch:x86
2c0ecbdee6faa6234c3618bb2218d46a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
SuspendThread
GetEnvironmentVariableA
LocalSize
InterlockedExchange
GetStdHandle
WriteFile
GlobalFree
lstrlenA
GetPrivateProfileIntA
LocalFree
VirtualAllocEx
FreeConsole
ReleaseMutex
GetCommandLineW
CreateEventW
CreateMutexW
LoadLibraryW
ResetEvent
CloseHandle
advapi32
RegCreateKeyExW
ControlService
RegCloseKey
InitializeSid
RegEnumKeyA
IsValidSid
IsTextUnicode
CreateServiceW
CloseEventLog
RegDeleteValueA
ClearEventLogW
RegQueryValueW
IsValidSecurityDescriptor
InitializeSid
fwcfg
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
InitHelperDll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ