Static task
static1
Behavioral task
behavioral1
Sample
fc5c1f6ff4710ddaf691364144a7d041e7d8a33d05de47fc0836acbf241c780c.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
fc5c1f6ff4710ddaf691364144a7d041e7d8a33d05de47fc0836acbf241c780c.exe
Resource
win10v2004-20230621-en
General
-
Target
fc5c1f6ff4710ddaf691364144a7d041e7d8a33d05de47fc0836acbf241c780c
-
Size
208KB
-
MD5
a51483993e226ca5b560ec09034e2764
-
SHA1
ce5cdda16274edc05d5ab8b5a08ccd5ea75721af
-
SHA256
fc5c1f6ff4710ddaf691364144a7d041e7d8a33d05de47fc0836acbf241c780c
-
SHA512
f5b191c8040727e31eeb89e58b30fb7586247734e0f3cfd93c964b6b56d176496f7dd48c41512784b74209ec20407f3ce2476c9bee1aaa02270643fd2f68eaa3
-
SSDEEP
3072:JaY0LwJjqkCPyIrxC58W8DxmfKcSAUJ9TzKLjCmWA5wBUg:J70vxUSZoL1WA5wBU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc5c1f6ff4710ddaf691364144a7d041e7d8a33d05de47fc0836acbf241c780c
Files
-
fc5c1f6ff4710ddaf691364144a7d041e7d8a33d05de47fc0836acbf241c780c.exe windows x86
a19128c77d60d2b394dfa78b2e70b342
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msi
ord217
ord173
credui
CredUIParseUserNameW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
SetStdHandle
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
WriteConsoleA
GetConsoleCP
SetFilePointer
RtlUnwind
InitializeCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleOutputCP
GetCommandLineW
SetEnvironmentVariableW
GetCurrentProcess
GetProcAddress
Sleep
CloseHandle
GetLastError
CreateProcessW
GetShortPathNameW
GetModuleFileNameW
SearchPathW
GetComputerNameW
FormatMessageW
LoadLibraryW
LocalAlloc
LocalFree
GetModuleHandleW
WriteConsoleW
HeapSize
CreateFileA
FlushFileBuffers
GetConsoleMode
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
WideCharToMultiByte
LCMapStringA
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
MultiByteToWideChar
user32
CreateDialogParamW
DialogBoxIndirectParamW
InflateRect
GetSysColorBrush
SetCursor
DispatchMessageW
MessageBoxW
EnumWindows
SetDlgItemTextW
GetMessageW
TranslateMessage
PostQuitMessage
ChildWindowFromPoint
IsDialogMessageW
GetSysColor
RegisterClassExW
ShowWindow
LoadIconW
DefWindowProcW
InvalidateRect
SetWindowTextW
GetWindowThreadProcessId
SendMessageW
GetDlgItem
LoadCursorW
EndDialog
gdi32
SelectObject
GetStockObject
GetObjectW
SetTextColor
CreateFontIndirectW
StartPage
GetDeviceCaps
EndDoc
EndPage
StartDocW
SetMapMode
SetBkMode
comdlg32
PrintDlgW
advapi32
RegSetValueW
CreateProcessWithLogonW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyW
shell32
ShellExecuteW
CommandLineToArgvW
SHGetMalloc
SHGetDesktopFolder
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 112KB - Virtual size: 108KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE