Static task
static1
Behavioral task
behavioral1
Sample
e567b4de614b683dbeb18082ad4e3c0e32e695f9310bad97ea7f01d89d94e175.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e567b4de614b683dbeb18082ad4e3c0e32e695f9310bad97ea7f01d89d94e175.exe
Resource
win10v2004-20241007-en
General
-
Target
e567b4de614b683dbeb18082ad4e3c0e32e695f9310bad97ea7f01d89d94e175
-
Size
196KB
-
MD5
5b5afe2fadf061e4b16c60858dfff725
-
SHA1
9a73fbefbbc6e6c57f93c182ded6a12c4102e36d
-
SHA256
e567b4de614b683dbeb18082ad4e3c0e32e695f9310bad97ea7f01d89d94e175
-
SHA512
4be196ae795692e9d21ff45eb4203040271fe937b48b411bea6f1591689d4efc9bdea5c8236913e4661a191665c70792e2286df2f8c9e8a23a0f0b03d24ab8a0
-
SSDEEP
3072:00WaxPkJYEkQFZc01oxpd32LgE2Ld8p4ysTUNMfdoJ:VP0YVqc01ox+0E2Ld8p4p42S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e567b4de614b683dbeb18082ad4e3c0e32e695f9310bad97ea7f01d89d94e175
Files
-
e567b4de614b683dbeb18082ad4e3c0e32e695f9310bad97ea7f01d89d94e175.exe windows:4 windows x86 arch:x86
fabcda2c1a88db0a887d3f9f5963d5c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCommandLineA
GetVersion
ExitProcess
GetLastError
CloseHandle
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapReAlloc
HeapFree
VirtualFree
VirtualAlloc
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
SetConsoleCtrlHandler
MultiByteToWideChar
CreateFileA
GetStringTypeA
GetStringTypeW
ReadFile
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
LCMapStringA
LCMapStringW
Sections
.text Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ