Static task
static1
Behavioral task
behavioral1
Sample
558269793d2891c357952ecb435a2493.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
558269793d2891c357952ecb435a2493.exe
Resource
win10v2004-20231215-en
General
-
Target
558269793d2891c357952ecb435a2493
-
Size
544KB
-
MD5
558269793d2891c357952ecb435a2493
-
SHA1
1800d1ff7d983de0ee5ec9c257cf1ce7e2024b30
-
SHA256
689c60852a6f4c8589cce35fd85550d50ad98d6053c05a145be8febc40068211
-
SHA512
35283249627cb5f92e5c6a6727fa966203ef05ac2419987e9d9c2b8d91b63e9aacf6b4f265f45dbff538245e348c2c90a546c92838da4f49769593a7490466e4
-
SSDEEP
12288:1snwc0fSaLWo7tIKIVT6WN1sByF8waHqv:1snFit9tIKIVeu1d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 558269793d2891c357952ecb435a2493
Files
-
558269793d2891c357952ecb435a2493.exe windows:5 windows x86 arch:x86
a793e2edfba85986e611efc4cd9e9e61
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
clbcatq
SetSetupSave
imm32
ImmGetContext
ImmLockClientImc
ImmIsIME
ImmInstallIMEW
ImmLockIMC
ImmLockIMCC
ImmLockImeDpi
ImmNotifyIME
ImmDestroySoftKeyboard
ImmRegisterWordA
ImmRegisterWordW
ImmEnumInputContext
ImmEnumRegisterWordA
ImmEnumRegisterWordW
ImmCreateIMCC
ImmActivateLayout
ImmDisableIME
ImmGenerateMessage
ImmGetAppCompatFlags
ImmGetCandidateListA
ImmGetCandidateListCountA
ImmGetCandidateListCountW
ImmGetCandidateListW
ImmGetCandidateWindow
ImmGetCompositionFontA
ImmGetCompositionFontW
ImmGetCompositionStringA
ImmGetCompositionStringW
ImmGetCompositionWindow
ImmGetContext
ImmGetConversionListA
kernel32
GetLastError
CreateFileA
GetWindowsDirectoryA
GetTickCount
OutputDebugStringW
AttachConsole
IsBadCodePtr
HeapSetInformation
CreateRemoteThread
QueryDosDeviceW
_lread
odbc32
CloseODBCPerfData
CollectODBCPerfData
CursorLibLockDbc
CursorLibLockDesc
CursorLibLockStmt
CursorLibTransact
DllBidEntryPoint
GetODBCSharedData
LockHandle
SQLAllocHandle
SQLAllocHandleStd
SQLAllocStmt
SQLAllocConnect
httpapi
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
HttpAddUrl
Sections
.text Size: 31KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 330KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 488KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE