Static task
static1
Behavioral task
behavioral1
Sample
b51d17e541d0d0238fc6a9c15b211050.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b51d17e541d0d0238fc6a9c15b211050.exe
Resource
win10v2004-20231215-en
General
-
Target
b51d17e541d0d0238fc6a9c15b211050
-
Size
745KB
-
MD5
b51d17e541d0d0238fc6a9c15b211050
-
SHA1
960bb0b2dc602d5d587b00234b283eee65c7db31
-
SHA256
4c4552817337b4512acaaae05fd1914b1c353cc40c8e6d36dff0043fc4873235
-
SHA512
fffe7df01fd058ae3d403f896b94a2506c9f17a7cf79e83c0f9421e69d2c2b379208bb7d2e3ed913573580ee459ceb6ab1d4216860681fb1418e4cc724e65726
-
SSDEEP
12288:1qVCK1rj/RHKnJeW8N44ERkC9oU+Va4TRl36KYrL+N1o:0QK1PC+W4+kAoUoDTmKY/G1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b51d17e541d0d0238fc6a9c15b211050
Files
-
b51d17e541d0d0238fc6a9c15b211050.exe windows:4 windows x86 arch:x86
3b374eceb6359d1b939af5eed6a1fc03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
LoadResource
GetCommandLineW
SetEndOfFile
UnlockFile
UnlockFileEx
LockFileEx
MultiByteToWideChar
HeapDestroy
LockFile
GetCurrentThreadId
LoadLibraryExA
GetModuleFileNameA
GetModuleHandleA
LocalAlloc
InterlockedExchange
RaiseException
CreateThread
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
SetEvent
WaitForSingleObject
FindClose
FlushFileBuffers
InitializeCriticalSection
DeleteCriticalSection
SystemTimeToFileTime
HeapCreate
HeapReAlloc
WriteFile
HeapFree
GetProcessHeap
HeapAlloc
GlobalSize
GlobalAlloc
GetVersionExA
Sleep
WideCharToMultiByte
GetProcAddress
CloseHandle
GlobalLock
GlobalFree
FreeLibrary
ReadFile
GlobalUnlock
SetFilePointer
GetFileInformationByHandle
LoadLibraryA
InterlockedDecrement
GetLastError
GetUserDefaultLCID
InterlockedIncrement
lstrlenA
user32
LoadImageA
ReleaseDC
FindWindowA
GetDC
GetDesktopWindow
SetRect
SetTimer
PostThreadMessageA
DispatchMessageA
GetMessageA
gdi32
SetViewportOrgEx
SetWindowOrgEx
BitBlt
EnumMetaFile
CreateBitmap
SaveDC
CreateDIBSection
CreateCompatibleDC
SelectObject
SetMapMode
GdiFlush
SetWindowExtEx
CreateCompatibleBitmap
SetViewportExtEx
SetBkColor
ExtTextOutW
PlayMetaFile
DeleteObject
RestoreDC
DeleteDC
DeleteMetaFile
GetDeviceCaps
GetObjectType
StretchDIBits
SetStretchBltMode
SetDIBitsToDevice
LPtoDP
GetMetaFileBitsEx
SetMetaFileBitsEx
CreatePalette
GetDIBits
advapi32
RegEnumValueW
RegCloseKey
ole32
CoCreateGuid
OleRun
PropVariantClear
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CoCreateInstance
CoTaskMemRealloc
ReleaseStgMedium
StringFromGUID2
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoInitialize
CoRegisterClassObject
CoRevokeClassObject
StgOpenStorage
oleaut32
SysFreeString
VariantChangeTypeEx
SysAllocString
SysAllocStringLen
VariantCopy
VariantInit
VariantClear
VarUI4FromStr
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
RegisterTypeLi
SysStringLen
wininet
InternetGetConnectedState
winmm
mciSendCommandA
msvcp60
?nothrow@std@@3Unothrow_t@1@B
?copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPAGII@Z
?_Xran@std@@YAXXZ
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHABV12@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIABV12@II@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IABV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?_Xlen@std@@YAXXZ
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG0@Z
msvcrt
fflush
fwrite
strrchr
calloc
sprintf
fread
fprintf
_iob
_CIpow
_callnewh
?terminate@@YAXXZ
__wgetmainargs
_exit
_beginthread
swscanf
_wtol
__dllonexit
_onexit
_wcmdln
_wcsdup
exit
_adjust_fdiv
_initterm
__setusermatherr
_wcsicmp
_controlfp
__p__commode
__set_app_type
__p__fmode
_XcptFilter
_wtoi64
wcsrchr
longjmp
_wcsnicmp
strncmp
sqrt
_setjmp3
_snwprintf
_wcsupr
malloc
wcstok
_ftol
memcpy
??2@YAPAXI@Z
wcscpy
realloc
wcslen
memset
_purecall
__CxxFrameHandler
_EH_prolog
wcscmp
memcmp
wcsncmp
wcstod
_wtoi
free
wcsstr
strcpy
strlen
strcmp
memmove
wcschr
wcstoul
abs
swprintf
wcsncpy
_ltow
_except_handler3
wcscat
_wsplitpath
Sections
.text Size: 508KB - Virtual size: 507KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shrdat Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ