Static task
static1
Behavioral task
behavioral1
Sample
5101db1d7bcefe54bbd566b3d53d5711b4412ff56c1a952357fbe87449f52790.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5101db1d7bcefe54bbd566b3d53d5711b4412ff56c1a952357fbe87449f52790.exe
Resource
win10v2004-20230703-en
General
-
Target
5101db1d7bcefe54bbd566b3d53d5711b4412ff56c1a952357fbe87449f52790
-
Size
29KB
-
MD5
a1ba98e6b99014b8e6f9ab205fa9597a
-
SHA1
6d79e025ffb875c8c61f47a9d9b5b4fc9952430f
-
SHA256
5101db1d7bcefe54bbd566b3d53d5711b4412ff56c1a952357fbe87449f52790
-
SHA512
0596f4f9fa815e222294d243354724a4687a5c9b51f1d5245080eb0258164ce8f9b13a667d458ea84ba25f1d95ee2d3a09c8631ead647a34284cc316be036164
-
SSDEEP
384:nkP0GHuPgJ+oFDO0Vmnnnnnns/M57ekXeTXcuHo93KM7K3qyXJ:kP0euPc+EDOUf/1wShH153qs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5101db1d7bcefe54bbd566b3d53d5711b4412ff56c1a952357fbe87449f52790
Files
-
5101db1d7bcefe54bbd566b3d53d5711b4412ff56c1a952357fbe87449f52790.exe windows x86
bfecb4cde736d69e50c3f095104f8791
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc90u
ord2251
ord4423
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord2447
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord6482
ord1098
ord4211
ord794
ord589
ord4043
ord4967
ord1137
ord2479
ord4448
ord813
ord600
ord6801
ord4173
ord6803
ord4747
ord296
ord1272
ord801
msvcr90
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__CxxFrameHandler3
kernel32
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCommandLineW
comctl32
InitCommonControlsEx
registrycleaner
ShowRegExorImportDialog
ShowRegistryCleanerDialog
crashreport
ord1
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ