Static task
static1
Behavioral task
behavioral1
Sample
5c774a30ed5e03957a4ca17ace26d93ce1c0b6b92127b005d2e891d37615eb9c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5c774a30ed5e03957a4ca17ace26d93ce1c0b6b92127b005d2e891d37615eb9c.exe
Resource
win10v2004-20230915-en
General
-
Target
5c774a30ed5e03957a4ca17ace26d93ce1c0b6b92127b005d2e891d37615eb9c
-
Size
9.2MB
-
MD5
fa323e81b876bd2855f0e2f450220ab4
-
SHA1
af75dd50392ef9c43c122e17c30c14be71cc23d7
-
SHA256
5c774a30ed5e03957a4ca17ace26d93ce1c0b6b92127b005d2e891d37615eb9c
-
SHA512
b02c2520a9ce3a1cc580ca461739892289febb81e84cfd9da8134af49a038f42560e74f05f920a57a54c77982c867039d47f1b9f6d326b77c52192a60cff4ad0
-
SSDEEP
196608:nsfdDV5CaBefl8L+CVhFtKq5WUlA2UvEu1aybkfE5j1so:ArCg821kq5WUA5EKR3uo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c774a30ed5e03957a4ca17ace26d93ce1c0b6b92127b005d2e891d37615eb9c
Files
-
5c774a30ed5e03957a4ca17ace26d93ce1c0b6b92127b005d2e891d37615eb9c.exe windows:4 windows x86
497b209ec072a715f33938c4998692f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetCurrentDirectoryA
MultiByteToWideChar
FreeResource
GetLastError
lstrcmpiA
GetProcessHeap
GetVersionExA
FindResourceW
GetCommandLineA
HeapAlloc
lstrlenW
lstrlenA
FindResourceA
LoadResource
LockResource
CreateFileA
SizeofResource
WriteFile
DeleteFileA
HeapFree
SetCurrentDirectoryA
CreateProcessA
GetSystemDirectoryA
lstrcatA
GetUserDefaultLangID
WaitForSingleObject
lstrcpyA
CreateMutexA
GetSystemDefaultLangID
GetTempPathA
VirtualFree
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
HeapCreate
VirtualAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CloseHandle
ExitProcess
LCMapStringA
WideCharToMultiByte
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LCMapStringW
GetProcAddress
LoadLibraryA
user32
LoadStringA
MessageBoxW
MessageBoxA
LoadStringW
GetKeyboardLayoutList
UnloadKeyboardLayout
UpdateWindow
BeginPaint
CreateIconFromResource
LoadIconA
DialogBoxParamA
DialogBoxIndirectParamA
DialogBoxParamW
DialogBoxIndirectParamW
ShowWindow
CreateDialogParamA
DrawIcon
DestroyIcon
EndPaint
CreateDialogIndirectParamA
CreateDialogParamW
CreateDialogIndirectParamW
GetSysColor
GetWindowLongA
SetWindowLongA
BringWindowToTop
GetDC
CallWindowProcA
LoadBitmapA
GetCursorPos
ScreenToClient
GetDlgItem
SendMessageW
SendMessageA
PeekMessageA
GetClientRect
FillRect
GetSystemMetrics
SetWindowPos
PostMessageA
EndDialog
DestroyWindow
SetWindowTextW
SetWindowTextA
DrawFocusRect
InflateRect
ReleaseDC
gdi32
TextOutA
SetBkMode
SelectObject
SetTextColor
CreateFontW
DeleteObject
CreateFontA
DeleteDC
BitBlt
CreateSolidBrush
GetObjectA
CreateCompatibleDC
TextOutW
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoInitialize
CoCreateInstance
imm32
ImmGetIMEFileNameA
ImmIsIME
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9.1MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE