Static task
static1
Behavioral task
behavioral1
Sample
e03b5e62ea80cff41079912cc5af436400a27f2a5a0dce7c94ace7088fb757c3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e03b5e62ea80cff41079912cc5af436400a27f2a5a0dce7c94ace7088fb757c3.exe
Resource
win10v2004-20241007-en
General
-
Target
e03b5e62ea80cff41079912cc5af436400a27f2a5a0dce7c94ace7088fb757c3
-
Size
1.9MB
-
MD5
1bc8cda9144e1351ca43a0794a85f09c
-
SHA1
11f830cfdf67d4cb6a444259ac9f11399d53babd
-
SHA256
e03b5e62ea80cff41079912cc5af436400a27f2a5a0dce7c94ace7088fb757c3
-
SHA512
aa62c997a607f45bd258593600bb2cf7d6085fb37bd66f220f085ce995211e1d27d0280c2d061fd8551ec7ea58d65c35b9f175a976509ef6e684acaba7067a75
-
SSDEEP
49152:ISlNHydXboE+2pKWTvP6p9kB/GS0fsXCF8:ISjydNCYn0+d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e03b5e62ea80cff41079912cc5af436400a27f2a5a0dce7c94ace7088fb757c3
Files
-
e03b5e62ea80cff41079912cc5af436400a27f2a5a0dce7c94ace7088fb757c3.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fykeapla Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mfitzlay Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE