Static task
static1
Behavioral task
behavioral1
Sample
5477b0dd80a92a6ee9381dc5dd0afa41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5477b0dd80a92a6ee9381dc5dd0afa41.exe
Resource
win10v2004-20231215-en
General
-
Target
5477b0dd80a92a6ee9381dc5dd0afa41
-
Size
7KB
-
MD5
5477b0dd80a92a6ee9381dc5dd0afa41
-
SHA1
76d71b99368cf661fcfe78550672b6ebadf491c8
-
SHA256
cf3db9c877fa0571c3be0022c6b5def0bc7cb1383f2f8640499ddb46b38383f3
-
SHA512
c48a9c301b6796892904f57c0e551a014491726796d3c81909f70359f9d28e5c22916ef8e292137963c82db2f51f404d7a801551faa0ae61acd3c5cbf1a4c15a
-
SSDEEP
96:vm9Zhz4FHbs/Yo0xVIG2lRtv4HIF0jPu5nQEQ+0W:vm141Q/kxpIRtv4a+PuZRQ+0W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5477b0dd80a92a6ee9381dc5dd0afa41
Files
-
5477b0dd80a92a6ee9381dc5dd0afa41.exe windows:1 windows x86 arch:x86
e236c0a742d410fc208ec0e01b5f2721
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExpandEnvironmentStringsA
FreeLibrary
GetCommandLineA
GetExitCodeThread
GetFileAttributesA
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemDirectoryA
CloseHandle
GetTempPathA
HeapAlloc
LoadLibraryA
CopyFileA
LocalAlloc
LocalFree
QueryPerformanceCounter
RtlUnwind
RtlZeroMemory
CreateFileA
SetFilePointer
VerLanguageNameA
WaitForSingleObject
WriteFile
CreateProcessA
CreateThread
user32
LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
RegisterClassA
CreateWindowExA
DefWindowProcA
advapi32
RegFlushKey
RegOpenKeyExA
RegSetValueExA
crtdll
__GetMainArgs
_sleep
exit
raise
signal
strchr
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 448B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE