Static task
static1
Behavioral task
behavioral1
Sample
e83fae01e1b45677ad9b35d587cfc6844107043fba8d50641b1ccd3fce3d7e55N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e83fae01e1b45677ad9b35d587cfc6844107043fba8d50641b1ccd3fce3d7e55N.exe
Resource
win10v2004-20241007-en
General
-
Target
e83fae01e1b45677ad9b35d587cfc6844107043fba8d50641b1ccd3fce3d7e55N
-
Size
224KB
-
MD5
32cf7bd7eb312c5c1b77dfc7cfd74840
-
SHA1
66a1075809e93cd88619749970689263ebe0f4e0
-
SHA256
e83fae01e1b45677ad9b35d587cfc6844107043fba8d50641b1ccd3fce3d7e55
-
SHA512
3185cd198a3786672a3cffb8ae776b8f61edc08cdfa056b24db521db72e06bc1201175394ce133f8c5d1d8d268c285ea9fa006b5d099b6e96bf22a7ca2d0ac9e
-
SSDEEP
6144:wVDNl7dpxCDO60NWeaRsin12cQf+44zo0naGJ:wVDNl7dpwDtveaRdn1/DPaGJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e83fae01e1b45677ad9b35d587cfc6844107043fba8d50641b1ccd3fce3d7e55N
Files
-
e83fae01e1b45677ad9b35d587cfc6844107043fba8d50641b1ccd3fce3d7e55N.exe windows:4 windows x86 arch:x86
8f8e7f5be0daa45e0bb86ff274e39029
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetSystemDirectoryA
LoadLibraryA
FreeLibrary
GetProcAddress
FindFirstFileA
FindClose
CreateFileA
GetFileTime
CloseHandle
CompareFileTime
GetWindowsDirectoryA
CreateDirectoryA
GetVersionExA
GetStartupInfoA
GetFileType
GetStdHandle
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
SetEnvironmentVariableA
GetCommandLineA
GetVersion
RaiseException
HeapFree
FlushFileBuffers
WriteFile
HeapAlloc
WideCharToMultiByte
HeapReAlloc
HeapSize
MultiByteToWideChar
LCMapStringA
LCMapStringW
ReadFile
SetHandleCount
SetEndOfFile
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
winspool.drv
EnumPrintersA
advapi32
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ