Static task
static1
Behavioral task
behavioral1
Sample
5ecc70ab0eb37d17e3c146dc59fb1b41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5ecc70ab0eb37d17e3c146dc59fb1b41.exe
Resource
win10v2004-20231222-en
General
-
Target
5ecc70ab0eb37d17e3c146dc59fb1b41
-
Size
93KB
-
MD5
5ecc70ab0eb37d17e3c146dc59fb1b41
-
SHA1
9a20cd0aa25d009e78ce7bc934b7693eee5a4d0c
-
SHA256
6ab5803bfc6f834247f2935ab32338fbf7f20751061ea6538cdd04a19b7bb7bf
-
SHA512
5ce955fd98398dcd51d26472505fcf2fd6045c0a06ac9b617feb9beacf730be569a76faff27e36ebc7fcfb003375cf25384935695b96330f98b49858455f9455
-
SSDEEP
1536:za1aqWd6P6EGWvzsxZBkNeE1vjviB+qjtNF9:za1aqWd6P1nzAZusE1WHjZ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ecc70ab0eb37d17e3c146dc59fb1b41
Files
-
5ecc70ab0eb37d17e3c146dc59fb1b41.exe windows:4 windows x86 arch:x86
1f8bc4e3f575c1113b6746acfbb79a55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_LoadImageA
ImageList_Create
ImageList_Remove
ImageList_DrawIndirect
ImageList_Copy
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_DragMove
ImageList_LoadImage
ImageList_Destroy
ImageList_LoadImageW
ImageList_Read
ImageList_Merge
ImageList_BeginDrag
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_DrawEx
kernel32
lstrcpyA
GetCPInfo
lstrlenA
HeapFree
Sleep
GetFileSize
GetLocalTime
GetFileAttributesA
GetStringTypeA
CloseHandle
GetLastError
GetModuleHandleA
DeleteFileA
GetDateFormatA
lstrcpynA
GetStdHandle
user32
CloseWindow
CreateIcon
AppendMenuA
IsMenu
DrawIconEx
DrawTextA
GetWindowTextA
AppendMenuW
EndDialog
CopyImage
IsWindow
GetDC
LoadCursorA
DrawTextW
DialogBoxParamA
GetMenu
InsertMenuA
DrawIcon
advapi32
RegCreateKeyExW
RegEnumKeyW
RegReplaceKeyA
RegLoadKeyA
RegOpenKeyExA
RegLoadKeyW
RegEnumValueW
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegQueryValueA
RegFlushKey
RegOpenKeyExW
RegCreateKeyW
RegEnumValueA
RegOpenKeyW
Sections
.CsMi Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gIltr Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kMcZR Size: 7KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XbqHD Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ