Static task
static1
Behavioral task
behavioral1
Sample
5acb0b82619010c5350f7e6f4d6ad2b9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5acb0b82619010c5350f7e6f4d6ad2b9.exe
Resource
win10v2004-20231215-en
General
-
Target
5acb0b82619010c5350f7e6f4d6ad2b9
-
Size
12.2MB
-
MD5
5acb0b82619010c5350f7e6f4d6ad2b9
-
SHA1
0c148cbd78088f047f2d9c241c989ecdf652b8f0
-
SHA256
ef21f302d86380974e21a255812b69c7d68287a7e975989e0826325d69fb40f1
-
SHA512
95ada748b78c8cbc181cd14edd2a745038622cea1e62f735ad74050fd41303799f2d0abd8fcdda923d9b7154341e28821a400ef00fed53aaa99f4b8c2cae74db
-
SSDEEP
12288:zc8EvSAInj67ygU57H7zKEVlM++++++++++++++++++++++++++++++++++++++X:z0vSAImHU5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5acb0b82619010c5350f7e6f4d6ad2b9
Files
-
5acb0b82619010c5350f7e6f4d6ad2b9.exe windows:5 windows x86 arch:x86
123708792297e850a475b64837725c34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
SearchPathW
FindFirstFileW
CopyFileExW
TlsGetValue
GetDriveTypeW
GetNumberOfConsoleInputEvents
FindResourceExW
CallNamedPipeA
LoadResource
InterlockedIncrement
InitializeSListHead
CreateDirectoryW
GlobalLock
SetComputerNameW
GetCommProperties
FreeEnvironmentStringsA
SetTapeParameters
GetModuleHandleW
GenerateConsoleCtrlEvent
GetConsoleAliasesLengthA
GetPrivateProfileStringW
GetCommandLineA
GetSystemWow64DirectoryA
CreateDirectoryExW
InitializeCriticalSection
GlobalAlloc
AddRefActCtx
GetVolumeInformationA
ReadFileScatter
GetSystemWindowsDirectoryA
GetSystemTimeAdjustment
GetVersionExW
GlobalFlags
TerminateProcess
IsDBCSLeadByte
ReadFile
GetBinaryTypeW
CompareStringW
lstrlenW
SetConsoleTitleA
LCMapStringA
VerifyVersionInfoW
InterlockedExchange
GetFileSizeEx
GetCurrentDirectoryW
GetProcAddress
SetVolumeLabelW
WriteProfileSectionA
FreeUserPhysicalPages
BuildCommDCBW
OpenWaitableTimerA
GetLocalTime
LoadLibraryA
Process32FirstW
OpenMutexA
SetConsoleOutputCP
AddAtomA
FindAtomA
GetSystemInfo
EnumResourceTypesW
CreateIoCompletionPort
FreeEnvironmentStringsW
EnumResourceNamesA
FindNextFileW
GetConsoleTitleW
RequestWakeupLatency
GetConsoleCursorInfo
ScrollConsoleScreenBufferA
SetCalendarInfoA
GetWindowsDirectoryW
GetProfileSectionW
AreFileApisANSI
DeleteFileA
FlushFileBuffers
GetLastError
MoveFileA
GetStartupInfoA
HeapValidate
IsBadReadPtr
RaiseException
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
GetModuleFileNameW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
InterlockedDecrement
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
RtlUnwind
DebugBreak
OutputDebugStringA
OutputDebugStringW
LoadLibraryW
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
CloseHandle
GetModuleHandleA
user32
GetMenuCheckMarkDimensions
GetMenuInfo
GetMenuBarInfo
Sections
.text Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11.9MB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ