Static task
static1
Behavioral task
behavioral1
Sample
5ae4b3ba5cd5d104864b1e12e6b26f6e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5ae4b3ba5cd5d104864b1e12e6b26f6e.exe
Resource
win10v2004-20231215-en
General
-
Target
5ae4b3ba5cd5d104864b1e12e6b26f6e
-
Size
312KB
-
MD5
5ae4b3ba5cd5d104864b1e12e6b26f6e
-
SHA1
c26bfe516839e4287b2bdd115b05cbd0f8858138
-
SHA256
dcfabe85904e237be1a08ac2d07506e67459cd0041577e683c06bfe8123ca733
-
SHA512
311792c7a06d4841c4dd88a884e91d2c18f59280173f453fdfb08887ef0daa00c79225c0dfa30f60ce4dac6b68c43b1291ca671b7ab73c566c9fb1967fbb558d
-
SSDEEP
6144:xdhEVFmqqsAxUK45IjPHimC/zN0efxA0878PwW+:xEvmqVAIaimC/GGxDC8IV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ae4b3ba5cd5d104864b1e12e6b26f6e
Files
-
5ae4b3ba5cd5d104864b1e12e6b26f6e.exe windows:4 windows x86 arch:x86
055095080f08d78bb3a241e63e2e8cf5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateThread
TlsFree
TlsGetValue
GetProcessHeap
VirtualAlloc
CreatePipe
ReleaseMutex
IsDBCSLeadByte
SetEvent
GetVolumeInformationA
GetUserDefaultLangID
GlobalFindAtomA
GetStdHandle
GetConsoleCP
CompareStringA
GetThreadLocale
GetPriorityClass
CreateMutexA
GetExitCodeThread
GetOEMCP
user32
GetWindow
GetActiveWindow
IsIconic
GetForegroundWindow
GetClassInfoExA
GetFocus
InvalidateRect
ValidateRect
GetClassNameA
GetWindowTextA
IsWindowVisible
ReleaseDC
GetDC
GetWindowTextLengthA
ReleaseDC
RegisterClassA
ShowWindow
CloseWindow
GetSystemMetrics
shell32
SHCreateShellItem
SHGetFolderPathA
SHBrowseForFolderA
SHGetFileInfoA
SHChangeNotify
userenv
LoadUserProfileA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ