Static task
static1
Behavioral task
behavioral1
Sample
51c05879dca0cd4cb73d423c1a29d06e078f982ea38e8bb0c5d894e3027eefd2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
51c05879dca0cd4cb73d423c1a29d06e078f982ea38e8bb0c5d894e3027eefd2.exe
Resource
win10v2004-20230831-en
General
-
Target
51c05879dca0cd4cb73d423c1a29d06e078f982ea38e8bb0c5d894e3027eefd2
-
Size
157KB
-
MD5
8b4098e1e878436eb10f6441b2e3af90
-
SHA1
5e83c059454a921ac9cecd7173a1c635d707bdb2
-
SHA256
51c05879dca0cd4cb73d423c1a29d06e078f982ea38e8bb0c5d894e3027eefd2
-
SHA512
104c776d7346127f9832d8bb319c7201125f81e3a466010235b699e9ab8493ce8dffe7180f6e9546dce2adcfc58309102947bce45fef2b65a4432ea9269d42c5
-
SSDEEP
3072:bVu2aWUamp2aqbz/IhhxDmotpjuo3zHU6hYhznhIR4L4Uqwg5v0:bMvp2aqbzax3pjuo3nhYZhI9C6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51c05879dca0cd4cb73d423c1a29d06e078f982ea38e8bb0c5d894e3027eefd2
Files
-
51c05879dca0cd4cb73d423c1a29d06e078f982ea38e8bb0c5d894e3027eefd2.exe windows x64
8ae713110cafadc1f55935e704a978b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
FreeLibrary
LoadLibraryA
SetErrorMode
GetProcAddress
LocalFree
GetCurrentThreadId
GetLastError
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExA
WideCharToMultiByte
GetComputerNameA
GetPrivateProfileStringA
FindClose
FindNextFileA
FindFirstFileA
lstrlenA
CloseHandle
CreateFileA
lstrcpyA
GetModuleFileNameA
SetLastError
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileIntA
Sleep
GetTickCount
WinExec
GlobalDeleteAtom
GlobalFindAtomA
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
WriteConsoleA
HeapSize
GetLocaleInfoA
GetCurrentProcessId
QueryPerformanceCounter
SetEndOfFile
GetStringTypeW
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ReadFile
ExitProcess
GetModuleHandleW
GetConsoleMode
GetConsoleCP
WriteFile
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
RaiseException
RtlPcToFileHeader
HeapReAlloc
GetCommandLineA
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
HeapSetInformation
HeapCreate
GetStringTypeA
user32
wsprintfA
FindWindowA
PostMessageA
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
ole32
OleInitialize
OleUninitialize
oleaut32
VariantClear
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ