Static task
static1
Behavioral task
behavioral1
Sample
5812cf2ab3e0a44afd2d352f81ac962d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5812cf2ab3e0a44afd2d352f81ac962d.exe
Resource
win10v2004-20231215-en
General
-
Target
5812cf2ab3e0a44afd2d352f81ac962d
-
Size
164KB
-
MD5
5812cf2ab3e0a44afd2d352f81ac962d
-
SHA1
a2b180994e539547c6e4eeaf0ec1d59d5c2a47ba
-
SHA256
cfe728fd56404a8ef94d832d2af94eafeeb586bfdf2b2fc93fc9d6c2f2046fd9
-
SHA512
7d1f1a8ba1c851df5c4e252d3e4fdff407ebd2cc3c99a2db21ce5e5e661bbd633c1dd4bd5e73f89077d74d047160ba6047d2e39d99ceaf7abb4ed834a5767996
-
SSDEEP
3072:YlHNAtBjtPuLfGZmtHOoawwr4jSamMyTn:PjpotO3z+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5812cf2ab3e0a44afd2d352f81ac962d
Files
-
5812cf2ab3e0a44afd2d352f81ac962d.exe windows:4 windows x86 arch:x86
2118b8c0e1b90bbb10fc54a294c57c2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
DrawIconEx
EndDialog
GetDlgItem
GetParent
GetSysColor
MessageBoxW
PostMessageW
SendMessageW
kernel32
CloseHandle
CreateEventW
DuplicateHandle
ExpandEnvironmentStringsW
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeLibrary
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetFileInformationByHandle
GetLastError
GetSystemDirectoryW
GetSystemTime
GetThreadPriority
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapSetInformation
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
LoadResource
MultiByteToWideChar
OpenEventW
RaiseException
ReadFile
RegisterWaitForSingleObject
RemoveDirectoryW
ReplaceFileW
SetCurrentDirectoryW
SetEvent
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadPriority
SizeofResource
SystemTimeToTzSpecificLocalTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
UnregisterWait
WaitForSingleObject
WideCharToMultiByte
lstrcmpA
lstrlenW
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE