Static task
static1
Behavioral task
behavioral1
Sample
ec392bb7478e4a80df380a59f4d921a36d10778ba4cbd2a90791a4ca92f776a8.exe
Resource
win7-20240903-en
General
-
Target
ec392bb7478e4a80df380a59f4d921a36d10778ba4cbd2a90791a4ca92f776a8.exe
-
Size
428KB
-
MD5
a442f8783140bb5b0150657dc1be287e
-
SHA1
50d743b30c539a5796a6b7af294a0f46c7b72b83
-
SHA256
ec392bb7478e4a80df380a59f4d921a36d10778ba4cbd2a90791a4ca92f776a8
-
SHA512
6e6e7e982ec4f47c1f64b1b683a71dda2696262dfecb7d2d0faf9f1d1aaf52dd25c196f1f40bea7abc7ea6b3727572105897c01444085bb80722fe07d34a670e
-
SSDEEP
12288:gDEwAQkxvEFI5wkYCoJoAQ48l4ewCN3EMH:gDEQwvyd7JtV8yehUMH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec392bb7478e4a80df380a59f4d921a36d10778ba4cbd2a90791a4ca92f776a8.exe
Files
-
ec392bb7478e4a80df380a59f4d921a36d10778ba4cbd2a90791a4ca92f776a8.exe.exe windows:4 windows x86 arch:x86
158b9c744d6ab139720e02f2bcd16322
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
GetCurrentProcess
ExitProcess
LoadLibraryA
CreateFileA
user32
wsprintfA
CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA
advapi32
RegCloseKey
RegQueryValueA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegEnumValueA
RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
Sections
.text Size: 384KB - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ