Static task
static1
Behavioral task
behavioral1
Sample
5c219a22f62e7e81380dc4a7a3790c78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c219a22f62e7e81380dc4a7a3790c78.exe
Resource
win10v2004-20231215-en
General
-
Target
5c219a22f62e7e81380dc4a7a3790c78
-
Size
166KB
-
MD5
5c219a22f62e7e81380dc4a7a3790c78
-
SHA1
cef97cdaba2ee1b04d4a4d73cec51d050058063e
-
SHA256
e5c6c5a0181c4c11df76bf34b893ad78c1bd972e6c9c4fae1227fbc1493fdc15
-
SHA512
07f907dc47a25ac7b79ccac21e137783dd5ebbdc67fa1cbde6fcc84ea5960923914c7905f526034ded86e9ac125addeff51bae404992cf36beaa9d0b6e334ea3
-
SSDEEP
3072:YsNsEhbh9fSceAEplDyAP07nhUbLwuXkTKWsVYapvgnEky1AkVZD7qcdrJwd68/:RN9h9fSEssA87n+b8BjEdBVZrJ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c219a22f62e7e81380dc4a7a3790c78
Files
-
5c219a22f62e7e81380dc4a7a3790c78.exe windows:4 windows x86 arch:x86
83b456b92a6c086ef1c1b9ab051aeca0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
user32
EndPaint
RegisterClassExW
GetClassInfoExW
GetWindowRect
SetWindowTextW
MessageBoxW
PeekMessageW
GetWindowTextLengthW
GetParent
DestroyWindow
CreateWindowExW
GetWindowInfo
SetDlgItemTextW
SystemParametersInfoW
GetClientRect
TranslateMessage
BeginPaint
GetWindow
GetDlgItemTextW
GetDC
MapWindowPoints
SetCapture
DispatchMessageW
LoadCursorW
GetDlgItem
SetWindowPos
EndDialog
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
kernel32
GetVersionExA
GetCurrentProcess
SetFilePointer
GetVDMCurrentDirectories
LocalAlloc
LockResource
GetSystemTimeAsFileTime
FindResourceW
GetStartupInfoW
UnhandledExceptionFilter
DeleteCriticalSection
WritePrivateProfileSectionW
HeapDestroy
CreateProcessW
ExitProcess
GetStartupInfoA
VirtualAlloc
GetTickCount
GetCommandLineA
GetACP
RaiseException
InterlockedExchange
TlsFree
LoadResource
GetProcessHandleCount
VirtualFree
HeapFree
TlsGetValue
GetStdHandle
GetModuleFileNameW
InterlockedIncrement
WriteConsoleA
GetLocaleInfoA
WriteFile
LoadLibraryExW
GetCommandLineW
lstrcmpA
GetEnvironmentStrings
CreateFileMappingW
QueryPerformanceCounter
GetModuleFileNameA
GetSystemDirectoryW
CopyFileW
WideCharToMultiByte
SetStdHandle
MulDiv
SizeofResource
IsProcessorFeaturePresent
TlsSetValue
CloseHandle
CreateFileA
SetUnhandledExceptionFilter
InterlockedDecrement
LCMapStringW
ReadFile
TlsAlloc
GetDriveTypeW
FreeEnvironmentStringsA
GetProcessHeap
GetThreadLocale
EnumResourceNamesA
GetModuleHandleA
GetCPInfo
FlushFileBuffers
HeapReAlloc
GetEnvironmentStringsW
GetProcAddress
CreateFileW
GetFileAttributesW
FreeEnvironmentStringsW
HeapCreate
RtlUnwind
lstrcmpiW
Sleep
FlushInstructionCache
LoadLibraryW
GetCurrentProcessId
GetStringTypeA
HeapSize
InitializeCriticalSection
WriteConsoleW
GetVersionExW
GetConsoleOutputCP
HeapAlloc
GetLastError
LCMapStringA
GetCurrentThreadId
LoadLibraryA
GetFileType
GetFileSize
GetConsoleMode
GetStringTypeW
CreateSemaphoreW
GetOEMCP
IsDebuggerPresent
FreeLibrary
lstrlenA
GetConsoleCP
WaitForSingleObject
DeleteFileW
SetLastError
InterlockedCompareExchange
LeaveCriticalSection
GetModuleHandleW
GetVersion
LocalFree
SetHandleCount
lstrlenW
ole32
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoCreateInstance
CoInitialize
msvfw32
ICInfo
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ