Static task
static1
Behavioral task
behavioral1
Sample
5bb578f4ac1860f80270ca8f84d51942.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bb578f4ac1860f80270ca8f84d51942.exe
Resource
win10v2004-20231222-en
General
-
Target
5bb578f4ac1860f80270ca8f84d51942
-
Size
611KB
-
MD5
5bb578f4ac1860f80270ca8f84d51942
-
SHA1
1125a59e9b0c089ff9abc244cff40ffc02c0e046
-
SHA256
34e8ab246b4e9b215f0e0fca48f622da47b2db82baa8f5bc896e036be861c4ea
-
SHA512
7d80bd76510ae83dc6b7945381bde09b5890280dc28b6177653600a952f99331d8b96504164782a62ba8e18b3b6b2677610d887a092efe5cfb366662fe8b91a5
-
SSDEEP
12288:gmNVdMxVxw6YzecXL0ZOd9eH0En7IOm2Xh0tmsuqf2M4GJh5U5+:RBswVCbZI9adXgoqf6eY5+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bb578f4ac1860f80270ca8f84d51942
Files
-
5bb578f4ac1860f80270ca8f84d51942.exe windows:5 windows x86 arch:x86
41f928daead100574bed3ee72848b018
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
socket
bind
WSACleanup
connect
WSAGetLastError
setsockopt
recv
send
htonl
inet_addr
WSASetLastError
htons
gethostbyname
closesocket
netapi32
Netbios
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
kernel32
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
TlsAlloc
TlsGetValue
QueryPerformanceCounter
VirtualFree
HeapCreate
InterlockedDecrement
CreateDirectoryW
GetModuleFileNameW
FindFirstFileW
FindClose
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
CreateFileW
WriteFile
CloseHandle
GetCurrentProcess
GetSystemDirectoryW
GetWindowsDirectoryW
Sleep
WaitForSingleObject
lstrlenW
SizeofResource
LockResource
LoadResource
LCMapStringA
FindResourceExW
FreeResource
GetProcAddress
GetModuleHandleW
CopyFileW
SetFilePointer
ReadFile
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
GetFileAttributesW
SetFileTime
CreateFileA
HeapAlloc
GetProcessHeap
HeapFree
FormatMessageW
LocalFree
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
FindResourceW
TlsSetValue
user32
PostMessageW
IsWindow
FindWindowW
wsprintfW
advapi32
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ole32
CoInitialize
CoUninitialize
shell32
ShellExecuteExW
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteW
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 465KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ