Static task
static1
Behavioral task
behavioral1
Sample
55efae11d32315ff80bc2ab9aa3db1c0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
55efae11d32315ff80bc2ab9aa3db1c0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
55efae11d32315ff80bc2ab9aa3db1c0_exe32.exe
-
Size
59KB
-
MD5
55efae11d32315ff80bc2ab9aa3db1c0
-
SHA1
efc541ef896ff49934750405e86ed4b3520437ef
-
SHA256
552a7809b85a6c4416e7bd0f92358a64c67bcaff112ac085464dd6670a7bfb74
-
SHA512
a0af3898e3c5964894b83894078e4d7a69af540b5514ffa5216ce44c2b65fa5a1feba4045cd0d2bad92a541638b69bedabd7296705ec69b56746d24f58722db8
-
SSDEEP
768:5UB1D59Wd7ITin4shrWEvCZX+wn9x4ih0AkTofR18CQu8Deyt4:y9gJnb4PkTsj8pDr4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55efae11d32315ff80bc2ab9aa3db1c0_exe32.exe
Files
-
55efae11d32315ff80bc2ab9aa3db1c0_exe32.exe.exe windows:1 windows x86
27f04376a7c7d931225cc4d1eb284f4d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
BitBlt
CreateSolidBrush
SelectObject
kernel32
CloseHandle
CreateThread
ExitProcess
ExitThread
GetCommandLineA
GetEnvironmentStrings
GetModuleHandleA
GetStartupInfoA
GetVersion
LocalAlloc
LocalFree
LocalLock
LocalUnlock
ResumeThread
RtlUnwind
SetThreadPriority
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
GetFileType
GetStdHandle
GetModuleFileNameA
GetLastError
user32
CreateWindowExA
DefFrameProcA
DefMDIChildProcA
DialogBoxParamA
DispatchMessageA
EndDialog
GetClientRect
GetDC
GetMessageA
GetSubMenu
GetWindowLongA
LoadCursorA
LoadIconA
LoadMenuA
MessageBoxA
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseDC
SendMessageA
SetFocus
SetWindowLongA
TranslateMessage
wsprintfA
Sections
.text Size: 10KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 1KB - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ