dews
Static task
static1
Behavioral task
behavioral1
Sample
c69e4ce48dbf378920c3a0cc37ebf881307640e541e5b9d502e67ecd14ebf7fc.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
c69e4ce48dbf378920c3a0cc37ebf881307640e541e5b9d502e67ecd14ebf7fc.exe
Resource
win10v2004-20241007-en
General
-
Target
c69e4ce48dbf378920c3a0cc37ebf881307640e541e5b9d502e67ecd14ebf7fc.exe
-
Size
11.0MB
-
MD5
ef3c5015763ab19adfb70ad34cc3aab4
-
SHA1
78b17d4ecf64b54f8a60bdf831204ceea591e11d
-
SHA256
c69e4ce48dbf378920c3a0cc37ebf881307640e541e5b9d502e67ecd14ebf7fc
-
SHA512
eb2989667b3f052805e34022b978d258a740c83985854b5af884288bb36f8cf24564d0164153f778f92877a16c1303d3c360e70dc8128679a0b0dd0ad35e0236
-
SSDEEP
3072:qrLSAaIXFM9X/WWIyOEfEDQMZWecFKmZv:sNWktyH9VR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c69e4ce48dbf378920c3a0cc37ebf881307640e541e5b9d502e67ecd14ebf7fc.exe
Files
-
c69e4ce48dbf378920c3a0cc37ebf881307640e541e5b9d502e67ecd14ebf7fc.exe.exe windows:5 windows x86 arch:x86
e4c612f96489c3047672d0aa01e8ee66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitNamedPipeA
lstrlenW
LoadLibraryA
OpenWaitableTimerW
GetSystemDirectoryA
GetVersionExW
Sleep
FindFirstFileW
GetTickCount
OpenFileMappingW
DeleteFileA
GetModuleHandleW
CompareStringA
CreateSemaphoreW
CreateMutexW
GetProcAddress
GetFileSize
CreateEventA
GetSystemDirectoryW
CreateFileA
SetLocalTime
GetDateFormatW
FindResourceA
LoadLibraryW
GetCommandLineA
user32
GetClassLongA
PostMessageW
DialogBoxParamA
wsprintfA
CreateDesktopW
DrawStateA
GetDlgItemTextA
IsCharLowerA
MessageBoxW
DispatchMessageA
LoadBitmapW
ctl3d32
Ctl3dGetVer
Ctl3dCtlColor
Ctl3dRegister
Ctl3dEnabled
shlwapi
UrlCompareW
PathCommonPrefixA
UrlGetPartW
PathIsURLA
PathCombineA
UrlCanonicalizeW
UrlUnescapeA
PathIsRootW
UrlGetLocationW
UrlEscapeA
UrlCreateFromPathA
Exports
Exports
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 708B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.9MB - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ