Static task
static1
Behavioral task
behavioral1
Sample
e8fd0c8223bc07010f1212460f50c174112200f5298b34f7d8747bb5166a1d0c.exe
Resource
win7-20240903-en
General
-
Target
e8fd0c8223bc07010f1212460f50c174112200f5298b34f7d8747bb5166a1d0c
-
Size
138KB
-
MD5
ba2e877d4d5faeef6fcfd92994b8023e
-
SHA1
3da68acf410cc9fbbda12b3a7a58f19d6e528b2d
-
SHA256
e8fd0c8223bc07010f1212460f50c174112200f5298b34f7d8747bb5166a1d0c
-
SHA512
be93f12bd639fc8d3442dcd723f78b4379647afd9ecdbe1fb8c1a81bc9ddc003504702d008b880c5d36a7fa2e6a48a283670ca09a0fa01c0dabf0cb02ef9b1d8
-
SSDEEP
3072:VUhMsp+K1OXZjftqRO6DL/qHR4oBvsA7Ipr308dU4GE:VUhAOOt84Rh9KEi2E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8fd0c8223bc07010f1212460f50c174112200f5298b34f7d8747bb5166a1d0c
Files
-
e8fd0c8223bc07010f1212460f50c174112200f5298b34f7d8747bb5166a1d0c.exe windows:5 windows x86 arch:x86
99d5d54226d07fdab82543b1f9742b22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
GetDC
advapi32
RegCloseKey
shell32
ShellExecuteW
ws2_32
gethostbyname
iphlpapi
GetAdaptersAddresses
oleacc
LresultFromObject
gdi32
SaveDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
.text Size: 76KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CHDODWOD Size: 25KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE