Static task
static1
Behavioral task
behavioral1
Sample
5e3649ffe5e569a5eacc0fae869f1ece2178eaa334189190adb6aac38f2820b5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5e3649ffe5e569a5eacc0fae869f1ece2178eaa334189190adb6aac38f2820b5.exe
Resource
win10v2004-20230915-en
General
-
Target
5e3649ffe5e569a5eacc0fae869f1ece2178eaa334189190adb6aac38f2820b5
-
Size
11.2MB
-
MD5
d29223a672d6a93ccdac44a881df5db0
-
SHA1
edc734195e072eb181165d16db7da52bcc72a2a9
-
SHA256
5e3649ffe5e569a5eacc0fae869f1ece2178eaa334189190adb6aac38f2820b5
-
SHA512
194a79ad6a612e028b981343119bff288ddd1233abb937cdad8a04f8d4f34904db64e13c0ea6c417b7b8fe97f8c1fea4db233e68a64a5b2478a4fc52cb991187
-
SSDEEP
196608:AcTIXJTNlBChry0gaZtDZencJGQEDJiof6M8fvqQo3hs1Uj:zTCJTrBIrZt1QcUQEDJ6HqQo3hIa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e3649ffe5e569a5eacc0fae869f1ece2178eaa334189190adb6aac38f2820b5
Files
-
5e3649ffe5e569a5eacc0fae869f1ece2178eaa334189190adb6aac38f2820b5.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 9.7MB - Virtual size: 22.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ucupbgch Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hcmothxe Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE