Static task
static1
Behavioral task
behavioral1
Sample
md5checker.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
md5checker.exe
Resource
win10v2004-20230220-en
General
-
Target
md5checker.exe
-
Size
299KB
-
MD5
e0eed0f39d038118f3249e13e59c425e
-
SHA1
bbd8d01e3c837f98465653f47e72f74ecca74ae6
-
SHA256
07978dd8f674465adc99e84ab948172674a333a7d9554f42c47dc04338f6c0aa
-
SHA512
1047529fa590134dd7126b8f7a7c7cb3f09abdaf90f6927a61a2a6f5d8ab40a4cd689e6f537c81f315441f76b44a50b42f8c3e2969a8ac56393a955f855294cb
-
SSDEEP
3072:J5dZCsZWt/95/vcFw2bXM/nbXVeZ06snR5pWyXolqi2+h9z2Cqi2ESA6ASAj+qi/:JZEUbXM/blkXsRzJmx5haa1NsyET
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource md5checker.exe
Files
-
md5checker.exe.exe windows x86
6582fc762dec18197eb2c118ea3c3465
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
comctl32
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
InitCommonControlsEx
PropertySheetW
shlwapi
PathAppendW
SHDeleteKeyW
PathStripToRootW
PathIsSameRootW
PathRelativePathToW
PathIsRelativeW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathRemoveFileSpecW
PathIsDirectoryW
wininet
InternetOpenUrlW
InternetCloseHandle
InternetReadFile
InternetOpenW
kernel32
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
SetThreadPriority
ResumeThread
WaitForSingleObject
CloseHandle
EnumSystemCodePagesW
CreateFileW
GetFileAttributesExW
ReadFile
GlobalAlloc
GlobalLock
GlobalUnlock
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FindFirstFileW
FindClose
FindNextFileW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
GetNumberFormatW
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
IsValidCodePage
GetModuleFileNameW
GetLongPathNameW
GetModuleHandleW
GetProcAddress
GetUserDefaultLCID
GetStringTypeW
FlushFileBuffers
LCMapStringW
LCMapStringA
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
MultiByteToWideChar
GetStartupInfoA
GetFileType
SetHandleCount
LoadLibraryA
GetModuleFileNameA
GetStdHandle
WriteFile
HeapSize
GetOEMCP
GetACP
GetCPInfo
Sleep
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
RaiseException
GetStartupInfoW
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
ExitProcess
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
CreateThread
GetLastError
GetCurrentThreadId
ExitThread
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CreateFileA
GetStringTypeA
user32
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
DefWindowProcW
CheckMenuItem
EnableMenuItem
GetMenuItemID
GetMenuItemCount
GetMenu
CheckMenuRadioItem
LoadIconW
SetWindowTextW
GetClientRect
EndDeferWindowPos
BeginDeferWindowPos
DestroyMenu
TrackPopupMenuEx
SetMenuDefaultItem
GetSubMenu
LoadMenuW
GetCursorPos
PostQuitMessage
UpdateWindow
LoadBitmapW
CreateWindowExW
TranslateMessage
InvalidateRgn
DrawFocusRect
GetFocus
ReleaseDC
GetDC
GetWindowTextW
CallWindowProcW
LoadCursorW
SetCursor
CheckRadioButton
PostMessageW
ShowWindow
CreateDialogParamW
DestroyWindow
IsDialogMessageW
GetClipboardData
IsClipboardFormatAvailable
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
LoadStringW
KillTimer
SetTimer
GetAsyncKeyState
GetForegroundWindow
EnableWindow
SetWindowPos
GetDlgItemTextW
IsDlgButtonChecked
SetDlgItemTextW
CheckDlgButton
SendMessageW
GetWindowLongW
SetWindowLongW
GetParent
DialogBoxParamW
EndDialog
GetDlgItem
DispatchMessageW
MessageBoxW
GetWindowRect
DeferWindowPos
RegisterClassExW
gdi32
CreateFontIndirectW
GetObjectW
GetTextExtentPoint32W
DeleteObject
SetTextColor
SetBkMode
ExtTextOutW
SelectObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
DragQueryFileW
DragFinish
DragAcceptFiles
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
Sections
.text Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ