Static task
static1
Behavioral task
behavioral1
Sample
serial.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
serial.exe
Resource
win10v2004-20231215-en
General
-
Target
5753970b03fa99f420d2a863a4d9bbb0
-
Size
1017KB
-
MD5
5753970b03fa99f420d2a863a4d9bbb0
-
SHA1
c72f3d9f13317785ab172837446508ac124dc5a1
-
SHA256
51d21db5b802b5e67a47d1ada23e3170385c30f99328da360973b51d344bbf7d
-
SHA512
17e946c0b7c6725c57f65149588c2da3e3f5ab9260911cb674dde07a6d14ef57b30ac03df751db61752f82ddde8cd799098f7f06b4e5d8d8e5d4a194a3f8bb3d
-
SSDEEP
24576:O5y2l6368LTDGdT/qy4jKApad++OUqnWXRYL8/MEUn/tN+wIU:GOGdMjKApFncXKL8/MEa/t4wIU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/serial.exe
Files
-
5753970b03fa99f420d2a863a4d9bbb0.zip
-
changes.nfo
-
serial.exe.exe windows:5 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
dcgmumwo Size: 257KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rbsxloti Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bkmdkepk Size: 754KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pxxfswfo Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE