Static task
static1
Behavioral task
behavioral1
Sample
55430e7390582f74a1137991289112a0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55430e7390582f74a1137991289112a0.exe
Resource
win10v2004-20231215-en
General
-
Target
55430e7390582f74a1137991289112a0
-
Size
608KB
-
MD5
55430e7390582f74a1137991289112a0
-
SHA1
5c5caf0e8d9dc3dcfa97c34c9846b9b013185525
-
SHA256
e81cdb363d68b7ee052c07623ca11192c262015bdc200bcd591afdf71b0c86b3
-
SHA512
e10db2bab3d822df390333daee57939eb679c3884af510f0df66e2d14f1b8a2c02aaf80f21285ab5e98a3f87518b51f77b16df94bf47c979da742d608c9a57f3
-
SSDEEP
12288:qlUHuMJgtBjjbGSgRXidMjWCsJoOjMTa9I/fU:KUHNe3jbaR+MJUbMTai8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55430e7390582f74a1137991289112a0
Files
-
55430e7390582f74a1137991289112a0.exe windows:5 windows x86 arch:x86
5dfe3a04629240a65f6025666c24815d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
GetDeviceCaps
SetTextColor
SelectObject
SetBkColor
CreateSolidBrush
user32
LoadIconA
SetForegroundWindow
PostQuitMessage
SetWindowPos
DispatchMessageA
GetWindowLongA
GetDC
GetClientRect
DestroyWindow
GetParent
UpdateWindow
EnableWindow
PeekMessageA
IsWindowEnabled
GetWindow
LoadStringA
EnableMenuItem
GetSubMenu
SetTimer
EndPaint
BeginPaint
DefWindowProcA
GetSystemMetrics
GetWindowRect
SetWindowLongA
wsprintfA
CreateWindowExA
GetDlgItem
ScreenToClient
GetDesktopWindow
EndDialog
MessageBoxA
GetSysColor
IsWindowVisible
InvalidateRect
SendMessageA
SetCursor
LoadCursorA
kernel32
GetStartupInfoA
LeaveCriticalSection
RtlUnwind
TlsGetValue
TlsSetValue
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
GetDriveTypeA
HeapDestroy
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetLocaleInfoA
LocalAlloc
FreeEnvironmentStringsW
SetStdHandle
GetTempPathA
WideCharToMultiByte
lstrcmpiA
GetOEMCP
VirtualAlloc
FindResourceA
Sleep
VirtualFree
WriteFile
HeapCreate
IsValidCodePage
CreateProcessA
GetModuleHandleW
GlobalLock
GetACP
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
GetConsoleMode
RaiseException
GetCurrentThread
GetCommandLineA
HeapSize
GetCPInfo
LockResource
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
lstrlenA
UnmapViewOfFile
LCMapStringW
GetLastError
InterlockedIncrement
HeapAlloc
CreateFileA
GetFileType
CreateEventA
CreateFileW
CreateEventW
WaitForMultipleObjects
FindNextFileA
GetStringTypeA
GetCurrentThreadId
FindFirstFileA
GetProcessHeap
GetProcAddress
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
CompareStringA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
GetVersion
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
ExitProcess
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
SetEvent
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
InterlockedExchange
advapi32
RegSetValueExW
RegQueryValueExW
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegCloseKey
RegSetValueExA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 585KB - Virtual size: 585KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ