Static task
static1
Behavioral task
behavioral1
Sample
eac4e27d0723fbb1d8dc20389df2721ddb60e43d0799e3b78e4f8a523df471a1.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
eac4e27d0723fbb1d8dc20389df2721ddb60e43d0799e3b78e4f8a523df471a1.exe
Resource
win10v2004-20240802-en
General
-
Target
eac4e27d0723fbb1d8dc20389df2721ddb60e43d0799e3b78e4f8a523df471a1
-
Size
154KB
-
MD5
1584f7f60b1aeafc5189fc790faae335
-
SHA1
4a5b3bc340d30ab9726d21b5492da7087bf93a73
-
SHA256
eac4e27d0723fbb1d8dc20389df2721ddb60e43d0799e3b78e4f8a523df471a1
-
SHA512
b96823c013538b0b8f1a13d51ba2e82a012b8cf3baeb9e1559b38ecc6c75d844b7a459f98e58496b1e069bb482d39f3a8a30ce6d011775b38909282152c8120c
-
SSDEEP
3072:TTJ8HeA1WteqT1VFC+oiwJoYzLXJS1K6ndGsBCsnetsCB:TV8HeA4W+pY/EL+snej
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eac4e27d0723fbb1d8dc20389df2721ddb60e43d0799e3b78e4f8a523df471a1
Files
-
eac4e27d0723fbb1d8dc20389df2721ddb60e43d0799e3b78e4f8a523df471a1.exe windows:4 windows x86 arch:x86
20c909d34ac8c220468826bc2d8bdd33
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
SetLocaleInfoW
GetNumberFormatA
WideCharToMultiByte
ResetEvent
IsBadStringPtrA
GetStartupInfoA
lstrcpyA
GlobalAddAtomA
PulseEvent
lstrlenA
GetCurrentDirectoryA
GetTimeFormatA
OpenEventA
InterlockedDecrement
GetSystemDirectoryA
GetModuleHandleA
GetStringTypeA
msvcrt
__p__commode
_callnewh
time
_splitpath
_heapmin
_initterm
_adjust_fdiv
_exit
__getmainargs
_wspawnv
_wstrtime
atol
_wsetlocale
_environ
memcpy
perror
__set_app_type
_lrotr
__p__fmode
__setusermatherr
fseek
exit
_acmdln
_controlfp
_except_handler3
_XcptFilter
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ