Static task
static1
Behavioral task
behavioral1
Sample
5e94d6608582456d7489178adcc1edbeb3f871ca49a13928b1449c4739660532.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5e94d6608582456d7489178adcc1edbeb3f871ca49a13928b1449c4739660532.exe
Resource
win10v2004-20230703-en
General
-
Target
5e94d6608582456d7489178adcc1edbeb3f871ca49a13928b1449c4739660532
-
Size
9.4MB
-
MD5
a75a5a9a45e9c97a890fc3eb5a70b094
-
SHA1
5bbb5131a4761d53d82b6c117d9d6dca1df0d888
-
SHA256
5e94d6608582456d7489178adcc1edbeb3f871ca49a13928b1449c4739660532
-
SHA512
fb210e44e3b05af58b5780a6b673a6e678ffae7a6b475257d643b4ee31a5a63495b264e072937d4d8479358d17a790dc01212eae559498363de22b46bc000e26
-
SSDEEP
196608:i3bCTH5iGIQ7u47BtZti799BDsFH0UHgFUl7D+j5Vh7GMqCAYiUNIHhKrI2L3zA6:irU53IUu47htipU0B+n+tHGMq0iUNChu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e94d6608582456d7489178adcc1edbeb3f871ca49a13928b1449c4739660532
Files
-
5e94d6608582456d7489178adcc1edbeb3f871ca49a13928b1449c4739660532.exe windows x86
8b3e1b64879553ee3f14fbdee4fe8ab4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
vcruntime140
memset
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
kernel32
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
.text Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 880B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 858B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0^w Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.-V- Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5C1 Size: 9.4MB - Virtual size: 9.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ