?N_TB_DSO&EDJPAD@Z
Static task
static1
Behavioral task
behavioral1
Sample
5472771794b464c495bb86cb94a0957f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5472771794b464c495bb86cb94a0957f.exe
Resource
win10v2004-20231222-en
General
-
Target
5472771794b464c495bb86cb94a0957f
-
Size
189KB
-
MD5
5472771794b464c495bb86cb94a0957f
-
SHA1
32de00b7acaca3ebcb6ba433769013f16dec614e
-
SHA256
e0493ebc0b1221f58fb94785cf5b18cb66ebbfac9718b0d438585e6eaa92608f
-
SHA512
93bc017308ec88d67da636a86b66091d37d7191c807afcdd5681e41dc9c3a8b4ddfbc83c59adf8fb1e69fbd06e5d7990ce7c42b2fa246d0892ec16a965959969
-
SSDEEP
3072:6J+jbUcv7sF7LmppYE1S6M+1axgTLAaPpL2o1rG/1zN9aEX0kE3aSn:6J+nzQGRTYgTLdR01zuq0Va4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5472771794b464c495bb86cb94a0957f
Files
-
5472771794b464c495bb86cb94a0957f.exe windows:5 windows x86 arch:x86
b5f216badc267a9785f2e1463a908d44
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
gdi32
StretchDIBits
OffsetViewportOrgEx
ResizePalette
GetPaletteEntries
GetObjectA
GetCharWidth32W
SetLayout
StartDocW
SetRectRgn
GetPixel
Rectangle
PtVisible
LineDDA
shlwapi
StrNCatA
kernel32
lstrcatA
LocalSize
SetWaitableTimer
GetTempFileNameW
GetAtomNameA
Sleep
GetLocaleInfoA
DeleteCriticalSection
SetCommTimeouts
SetCommState
GetThreadTimes
ResetEvent
GetCurrentProcessId
GetOEMCP
OpenFileMappingW
ExitProcess
LoadLibraryW
GetTimeFormatA
user32
CallWindowProcW
CreateAcceleratorTableW
DrawFrameControl
GetFocus
InvalidateRgn
CreateWindowExW
IsWindow
SetDlgItemInt
CharPrevW
SetScrollPos
GetClassInfoExA
CreateIconFromResource
EnumThreadWindows
GetMenuItemID
IsCharUpperA
SendDlgItemMessageW
ReplyMessage
GetClassInfoExW
GetWindowTextW
RemovePropW
AdjustWindowRect
CreateMenu
LoadCursorA
WaitForInputIdle
GetMessageW
MapVirtualKeyW
LoadBitmapA
EnumWindows
DefDlgProcA
KillTimer
comdlg32
FindTextW
PrintDlgW
GetOpenFileNameW
GetFileTitleW
Exports
Exports
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pics Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.picd Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.picc Size: 1024B - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.help Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.virt Size: - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ