Static task
static1
Behavioral task
behavioral1
Sample
5b0d2b413ab90dce290dda59325e1055.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b0d2b413ab90dce290dda59325e1055.exe
Resource
win10v2004-20231215-en
General
-
Target
5b0d2b413ab90dce290dda59325e1055
-
Size
108KB
-
MD5
5b0d2b413ab90dce290dda59325e1055
-
SHA1
4c7489f67b7278b1c593ad44cfd6d12e34b6a07d
-
SHA256
e831c7d2eabf753abb9d9e719a772ce830f220f702ab0f12e70e0160982cb980
-
SHA512
cbbffae77c25defaf0d2ded536f3fe4ed7a041f29d48498d0115ab01813b63f9da409212c03dc0d92889716a68cd5839f02641f414bff660a3200fb1c7f4252d
-
SSDEEP
1536:65/qfJrSOECb8X5Uud1fTh9CeIIRQlaRnReJe80Hce1qTLiqLUxV7nIOB4V:Q/qfdECbaUS1rmeIIRKVe/ceD7nIO2V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b0d2b413ab90dce290dda59325e1055
Files
-
5b0d2b413ab90dce290dda59325e1055.exe windows:4 windows x86 arch:x86
d295531ee52b628cf226f3f2ced8c155
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
GetSystemMetrics
TranslateMessage
GetParent
GetDC
GetDesktopWindow
kernel32
RemoveDirectoryA
DeleteFileA
GlobalFindAtomA
GetWindowsDirectoryA
lstrlenW
lstrlenA
QueryPerformanceCounter
GetSystemTime
VirtualAlloc
lstrcmpA
lstrcmpiA
CopyFileA
VirtualFree
GetCommandLineA
GetModuleHandleA
RemoveDirectoryW
FindClose
lstrcmpiW
gdi32
SaveDC
GetObjectA
SetStretchBltMode
SetTextColor
SetTextAlign
GetStockObject
DeleteDC
GetClipBox
SetMapMode
RestoreDC
GetPixel
SelectObject
CreateCompatibleDC
GetTextMetricsA
LineTo
DeleteObject
CreatePalette
SelectPalette
GetDeviceCaps
CreateSolidBrush
RectVisible
glu32
gluNurbsCallback
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ