Static task
static1
Behavioral task
behavioral1
Sample
5f2aedbd61536f140f261196a69bce2573d5df48ddc1f509ad517099b289a940.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5f2aedbd61536f140f261196a69bce2573d5df48ddc1f509ad517099b289a940.exe
Resource
win10v2004-20230703-en
General
-
Target
5f2aedbd61536f140f261196a69bce2573d5df48ddc1f509ad517099b289a940
-
Size
88KB
-
MD5
27db0e943049214de9897656edde3b98
-
SHA1
656f81263a0baf3e37f2e136ef21a2876977bd6c
-
SHA256
5f2aedbd61536f140f261196a69bce2573d5df48ddc1f509ad517099b289a940
-
SHA512
25ae664eeae6eca3c39e95129d5fd63a4d8e1dba0292e3a11bcfa6888b82a94b40131fb3d9175e747a915d63a74df609f11f783127ea0c6fe1900293b57deb28
-
SSDEEP
1536:hPlYig/41A5EfJLk/p0kcwdScgkmieBsB6eOot:hPlYQA5+Lk/qkcwi4eB2Oot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f2aedbd61536f140f261196a69bce2573d5df48ddc1f509ad517099b289a940
Files
-
5f2aedbd61536f140f261196a69bce2573d5df48ddc1f509ad517099b289a940.exe windows x86
3e2adc282a20dc0d5c093aa6f8a7e4af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetLastError
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
user32
MessageBoxA
wsprintfA
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ