Static task
static1
Behavioral task
behavioral1
Sample
ea1e471f9064104cfb568a0cb2e050acb07a56a5f9ee079d991d770aa96057b3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea1e471f9064104cfb568a0cb2e050acb07a56a5f9ee079d991d770aa96057b3.exe
Resource
win10v2004-20241007-en
General
-
Target
ea1e471f9064104cfb568a0cb2e050acb07a56a5f9ee079d991d770aa96057b3
-
Size
1.6MB
-
MD5
2413d2a5c85c3904fb67b8e50cb257cf
-
SHA1
a2d2f01343193d9fa8e6add731dfc93aae34870a
-
SHA256
ea1e471f9064104cfb568a0cb2e050acb07a56a5f9ee079d991d770aa96057b3
-
SHA512
7c2f502cef0038002e1d16370a8ea5900f0d9ac15804e005976fa45d954c7f893dfb25e6860675aa77456ec35c04429cab1a069d4c4f033166bdba1b69d7d448
-
SSDEEP
49152:rFfG6WRhAGMZRE5BGKz3TWJtYVUfOvbACGLQS:1G6nXmeekOvbHGLF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea1e471f9064104cfb568a0cb2e050acb07a56a5f9ee079d991d770aa96057b3
Files
-
ea1e471f9064104cfb568a0cb2e050acb07a56a5f9ee079d991d770aa96057b3.exe windows:4 windows x86 arch:x86
2c2818ce30863a575546127325a476d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetEnvironmentStrings
user32
LoadStringA
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ImageList_GetImageCount
ws2_32
WSACleanup
wldap32
ord29
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 664KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ