Static task
static1
Behavioral task
behavioral1
Sample
54c92ba5f91fe5b0114d2de6926196d8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54c92ba5f91fe5b0114d2de6926196d8.exe
Resource
win10v2004-20231215-en
General
-
Target
54c92ba5f91fe5b0114d2de6926196d8
-
Size
372KB
-
MD5
54c92ba5f91fe5b0114d2de6926196d8
-
SHA1
bf903867cf9857ea95f48a71d1af5223dbc5c475
-
SHA256
f1369fd7876e60b55c83b76241d9b04660608dd073cc4dbb54bb28444d262b71
-
SHA512
462d96d6fdc6c183d31b418f9861f52a6e6d0ab0b7f416bc0eec5bf1512f089cfe6ebd73e27cf67abba98f1b98cfd416c3fb67674e04305758cf8ffa666b88db
-
SSDEEP
6144:L4EaNBxDtQA7vFvid7xl519Ir3BHHtn6b83oGEU10tABLhcc:L4vBx7h6Bxentn6s1E00t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54c92ba5f91fe5b0114d2de6926196d8
Files
-
54c92ba5f91fe5b0114d2de6926196d8.exe windows:4 windows x86 arch:x86
5cc749aa2db15abe2f94170de5486483
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
SetConsoleInputExeNameA
GetSystemTime
DeleteTimerQueue
OpenThread
GlobalAddAtomA
TerminateThread
GetConsoleSelectionInfo
lstrcatA
SetConsoleNumberOfCommandsA
GetConsoleOutputCP
EndUpdateResourceA
BuildCommDCBA
VerifyVersionInfoA
Toolhelp32ReadProcessMemory
GetProcessPriorityBoost
FreeResource
SetConsoleMode
WriteConsoleOutputCharacterW
GetConsoleCP
Heap32ListNext
GetSystemTimeAsFileTime
IsBadReadPtr
SetConsoleScreenBufferSize
PulseEvent
IsBadStringPtrA
BeginUpdateResourceA
GetVolumePathNameA
ReadConsoleOutputCharacterA
CreateDirectoryExA
ExitProcess
GetExitCodeThread
ReadConsoleInputA
RemoveDirectoryA
_hread
SizeofResource
lstrcat
LocalFlags
GetConsoleAliasExesLengthW
SetTimerQueueTimer
CreateTimerQueueTimer
SetWaitableTimer
GetTickCount
GetVersionExA
WriteFileGather
GetPrivateProfileSectionA
ReadConsoleA
UnregisterWait
GetLogicalDriveStringsA
GetExitCodeProcess
SetInformationJobObject
GetThreadIOPendingFlag
VirtualAllocEx
HeapValidate
GetTickCount
CreateWaitableTimerA
GetNumberOfConsoleMouseButtons
FlushViewOfFile
LocalHandle
FindFirstChangeNotificationA
IsBadWritePtr
SleepEx
GetThreadSelectorEntry
GetTempPathA
GetConsoleCursorMode
LZOpenFileA
GetSystemTimes
SetConsoleCursorMode
OpenMutexA
SetFileAttributesA
WriteProfileSectionA
lstrcmpiA
GetDiskFreeSpaceExA
GetWindowsDirectoryA
SetHandleInformation
VirtualLock
GetConsoleMode
WritePrivateProfileSectionA
GetFileAttributesExA
CreateSocketHandle
QueueUserWorkItem
MoveFileExA
GetSystemWindowsDirectoryA
GetVersionExA
GetVolumePathNameA
SetFilePointerEx
_lclose
OpenWaitableTimerA
GetBinaryTypeA
GetVolumePathNameA
GetCurrentDirectoryA
GetConsoleTitleA
GetComputerNameA
GetThreadSelectorEntry
VirtualFree
OutputDebugStringA
Heap32ListFirst
VirtualAllocEx
GetSystemDirectoryA
ReadConsoleOutputCharacterA
SetDefaultCommConfigA
GetLocaleInfoA
GetCommandLineA
WriteFileGather
GlobalSize
GetModuleHandleA
CommConfigDialogA
DeleteFileA
LZCopy
ReadConsoleOutputA
SetConsolePalette
GetVolumePathNamesForVolumeNameA
IsDebuggerPresent
FindCloseChangeNotification
GetCommMask
GetBinaryTypeA
LZSeek
LockResource
GlobalFindAtomA
GetTickCount
GetPrivateProfileIntA
HeapSetInformation
GetTapePosition
lstrcmpA
GetDllDirectoryA
GetThreadPriority
GetVolumeNameForVolumeMountPointA
DeleteTimerQueueEx
GetFileAttributesExA
GetEnvironmentVariableA
CommConfigDialogA
GetExpandedNameA
UnlockFile
SetConsoleIcon
ExpandEnvironmentStringsA
OpenEventA
CreateThread
GetSystemDefaultUILanguage
GetPrivateProfileSectionNamesA
GetCurrentDirectoryA
RequestDeviceWakeup
PulseEvent
FindFirstFileExA
GetFileType
FindNextVolumeA
GetTickCount
SetLocaleInfoA
OpenJobObjectA
OpenProfileUserMapping
GetPriorityClass
GetThreadPriorityBoost
GetComputerNameExA
GetDllDirectoryA
EnumResourceNamesA
GetFileType
LockFileEx
VirtualLock
Module32Next
ProcessIdToSessionId
GetFileAttributesExA
LoadModule
UnregisterWaitEx
BeginUpdateResourceA
DeleteAtom
GetProcessId
GetComputerNameA
CreateFileMappingA
EnumSystemLocalesA
ReadConsoleInputA
GetProcessId
GetCurrentThreadId
GlobalLock
EndUpdateResourceA
EnumUILanguagesA
user32
ClientThreadSetup
EndDeferWindowPos
GetCursorFrameInfo
CloseWindow
RegisterWindowMessageA
SetScrollInfo
BeginPaint
GetWindowTextA
CharUpperBuffA
GetAltTabInfoA
SendNotifyMessageA
FindWindowExW
ShowWindowAsync
ModifyMenuA
EnumDisplaySettingsExA
SetRect
GetSubMenu
AdjustWindowRect
SetKeyboardState
GetMenuItemID
CreateAcceleratorTableA
ReleaseDC
RegisterShellHookWindow
GetScrollInfo
FreeDDElParam
RemoveMenu
EnumDisplaySettingsExW
EnableMenuItem
RegisterDeviceNotificationA
ReleaseCapture
CreateIconFromResourceEx
OemToCharA
GetUserObjectInformationA
MessageBoxTimeoutW
IsDialogMessage
PostMessageA
GetQueueStatus
GetComboBoxInfo
AlignRects
SetInternalWindowPos
EnumDisplayDevicesA
GetAppCompatFlags
LoadMenuIndirectA
DlgDirSelectComboBoxExA
SetWindowLongA
GetClassNameA
CharToOemA
GetDesktopWindow
OemToCharBuffA
EndMenu
DialogBoxIndirectParamA
SystemParametersInfoA
GetReasonTitleFromReasonCode
GetTabbedTextExtentA
CreateMDIWindowA
LoadBitmapA
EnumPropsExA
EnumPropsExA
HideCaret
DrawCaption
SetWindowStationUser
RegisterWindowMessageA
CopyRect
IsCharAlphaNumericA
GetAppCompatFlags
ExcludeUpdateRgn
DestroyIcon
CopyImage
DrawCaption
SetForegroundWindow
EndDeferWindowPos
LoadMenuIndirectA
ReasonCodeNeedsComment
DestroyIcon
BringWindowToTop
InvertRect
DefFrameProcA
SetKeyboardState
GetDesktopWindow
AppendMenuA
ReleaseDC
OpenDesktopA
GetClassNameA
IsWindowEnabled
SetWindowWord
SetRectEmpty
LoadStringA
PrivateExtractIconsA
DlgDirListA
advapi32
IsValidSid
Sections
.itext Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 176KB - Virtual size: 423KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ