Static task
static1
Behavioral task
behavioral1
Sample
5056d8353038cd8beca59acdfa4402803d9254246644ac64664412ddcbdc0270.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5056d8353038cd8beca59acdfa4402803d9254246644ac64664412ddcbdc0270.exe
Resource
win10v2004-20230703-en
General
-
Target
5056d8353038cd8beca59acdfa4402803d9254246644ac64664412ddcbdc0270
-
Size
2.5MB
-
MD5
84945ed05c12c8e4d37e3303b25ac179
-
SHA1
fc7dc6633208b5b3e51e03bf3762bba7b3dbb314
-
SHA256
5056d8353038cd8beca59acdfa4402803d9254246644ac64664412ddcbdc0270
-
SHA512
ed77b3d60402d58649032dd58ed25c3984f78670bed80d827bd0ff4f652ab3944dbc4f62460c6edd9dc31fa9f7aba31038d2b2b55e43495890d9bb187f986329
-
SSDEEP
49152:7CXf0GlseOfFGbKlP11Te00gUe14T9wgzWUEwYtxpkjh1p/9ALTrb:7CXffl2x9heq8T9IUE3xG9ALfb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5056d8353038cd8beca59acdfa4402803d9254246644ac64664412ddcbdc0270
Files
-
5056d8353038cd8beca59acdfa4402803d9254246644ac64664412ddcbdc0270.exe windows x86
6a70829718b2422ce9f3e8a6882ee753
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
FindNextFileA
user32
wsprintfA
SystemParametersInfoA
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
gdi32
ScaleWindowExtEx
msimg32
GradientFill
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wldap32
ord29
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.2MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ