Static task
static1
Behavioral task
behavioral1
Sample
5b8ca7cef823a5fc6a5486df51c5dfd0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
5b8ca7cef823a5fc6a5486df51c5dfd0.exe
Resource
win10v2004-20231023-en
General
-
Target
5b8ca7cef823a5fc6a5486df51c5dfd0.exe
-
Size
13KB
-
MD5
5b8ca7cef823a5fc6a5486df51c5dfd0
-
SHA1
f318e5cffb68ea1f19d1dee953dbb1d72db785a2
-
SHA256
8c83666c42f64e606b7b382b31a916adcd24dd7ffd3310a6c84fdbef26f83700
-
SHA512
115f37fb4e26854c339c51eba207764adc2d8ccb4749d22d7e7f665f47838554475b713e18396dbaf002897a3d62c751706cc14a90522a82ce4542bcda228b12
-
SSDEEP
192:A9IT9C/1u17MlC9hasSJfF9I73IyYCnWVfYo8wYWLThlHkzW0VWN4R:rTYCrvarI73IWOAPwYWLTPAW0VWq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b8ca7cef823a5fc6a5486df51c5dfd0.exe
Files
-
5b8ca7cef823a5fc6a5486df51c5dfd0.exe.exe windows:4 windows x86 arch:x86
8223a902cc4ea639812966580d96465b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFileMappingA
CloseHandle
lstrcatA
lstrcpyA
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
WinExec
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetStdHandle
GetFileType
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetProcAddress
LoadLibraryA
HeapCreate
WriteFile
HeapFree
HeapAlloc
user32
wsprintfA
advapi32
RegOpenKeyExA
RegQueryValueA
RegCloseKey
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 783B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ