Static task
static1
Behavioral task
behavioral1
Sample
e8c5e76222471159b0737132e7f230de8cc5a7d607d925c9071eeb8c76bbd0d7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e8c5e76222471159b0737132e7f230de8cc5a7d607d925c9071eeb8c76bbd0d7.exe
Resource
win10v2004-20241007-en
General
-
Target
e8c5e76222471159b0737132e7f230de8cc5a7d607d925c9071eeb8c76bbd0d7.exe
-
Size
554KB
-
MD5
b437b8899d8bf1ed9cf83fed3d45a638
-
SHA1
b3785a0120d7f90ea30a8f88e807fde02dec9187
-
SHA256
e8c5e76222471159b0737132e7f230de8cc5a7d607d925c9071eeb8c76bbd0d7
-
SHA512
ff7d9766d570eecba4dee4f00b360e8e63beee34ab9c5939fc6865f2b33e58bea96fe61134901be2f4ca9a3e8af7eebb24d846c25a2f38ae672c60b8c65fc47e
-
SSDEEP
12288:eBRem+Wx9nV7XV9sW7EuC91Ic/m8p+wQf:erx+CVDIjuCDxpg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8c5e76222471159b0737132e7f230de8cc5a7d607d925c9071eeb8c76bbd0d7.exe
Files
-
e8c5e76222471159b0737132e7f230de8cc5a7d607d925c9071eeb8c76bbd0d7.exe.exe windows:5 windows x86 arch:x86
d621dbe2e2fb8bf1d82f00e35407b8f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetNearestPaletteIndex
GetMapMode
GetTextColor
GetPixelFormat
GetTextCharsetInfo
GetObjectType
GetFontLanguageInfo
UpdateColors
GetFontUnicodeRanges
SetTextAlign
GetNearestColor
GetDeviceCaps
GetGraphicsMode
SetSystemPaletteUse
GetPolyFillMode
SetTextCharacterExtra
GetRandomRgn
SetTextJustification
SetPixel
SetTextColor
GetDCPenColor
GetStretchBltMode
GetTextCharacterExtra
GetBkColor
GetSystemPaletteUse
GetTextAlign
GetTextCharset
user32
BeginPaint
LoadIconA
ShowWindow
SetDlgItemTextA
GetMenuItemID
GetInputState
RemovePropA
EndDialog
CheckDlgButton
GetMenuContextHelpId
SetFocus
GetMenuItemCount
GetKeyboardType
EnableWindow
EndPaint
GetPropA
GetMenuState
PostMessageA
GetDlgItem
GetWindowDC
GetWindowContextHelpId
GetCursor
DrawTextA
IsWindowEnabled
GetDlgItemInt
GetScrollPos
GetForegroundWindow
WindowFromDC
GetMenu
IsWindowUnicode
SendMessageA
kernel32
ReadConsoleW
ReadFile
SetEndOfFile
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
HeapSize
GetCurrentDirectoryW
SetCurrentDirectoryW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
CreateFileW
GetFileAttributesExW
WriteConsoleW
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
FindClose
GetProcAddress
DeleteFileA
GetCurrentProcessId
GetLastError
FlushFileBuffers
GlobalSize
GetModuleHandleA
CloseHandle
GetCurrentThreadId
GetCurrentProcess
GlobalFlags
GetVersion
LockResource
GetTickCount
LocalFlags
GetProcessHeap
FindResourceA
MoveFileA
LoadResource
IsDebuggerPresent
GlobalAlloc
SetFilePointer
QueryPerformanceCounter
SizeofResource
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetTempPathA
GetFullPathNameA
GetFullPathNameW
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
IsProcessorFeaturePresent
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
SetLastError
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
DeleteFileW
RaiseException
GetFileType
GetStartupInfoW
GetStringTypeW
GetTimeZoneInformation
SetStdHandle
GetDriveTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
SetEnvironmentVariableA
Sections
.text Size: 494KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE