Static task
static1
Behavioral task
behavioral1
Sample
5eb8b9f1319f292ba56d4bdd7aca6443.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5eb8b9f1319f292ba56d4bdd7aca6443.exe
Resource
win10v2004-20231215-en
General
-
Target
5eb8b9f1319f292ba56d4bdd7aca6443
-
Size
372KB
-
MD5
5eb8b9f1319f292ba56d4bdd7aca6443
-
SHA1
eaa0e54891ad885e91e3b3970b32a7bacfdea9c3
-
SHA256
86351e5896c2470f511e56539e0c486bd8e08a350d93c426e3043adf35b63fd3
-
SHA512
dfa9b121d800d644ac9cd67d40f743e7a9273c41abe8515e5f72104c6f678369c49f178ad0e54abf48ac108acfd7be11b5fc2ecaa8986c21c738b49b53e8efe5
-
SSDEEP
6144:6oRBN7rCXDteZ18GzEXIBGKjxqbfygVpGDjwj4vZKxW7qmpEXuIIc/SpzWJgpJDo:6ovN7rCX5s18J4Y1Dj4vZ4PpEcap6Un
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5eb8b9f1319f292ba56d4bdd7aca6443
Files
-
5eb8b9f1319f292ba56d4bdd7aca6443.exe windows:4 windows x86 arch:x86
9339dc02287ba337c266d6b1cfbc09f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetDesktopWindow
GetWindowLongW
IsDialogMessageA
SetWindowTextA
SetWindowPos
GetSysColor
ScrollWindow
GetSysColorBrush
IsDialogMessageW
EndPaint
ScreenToClient
SetWindowPlacement
GetMessagePos
CallWindowProcA
LoadBitmapA
GetCursorPos
IsWindowUnicode
GetMenuItemCount
DefFrameProcA
LoadCursorA
IsWindow
GetParent
CreateWindowExA
CharNextW
CharToOemA
GetScrollPos
GetKeyboardLayout
EnumWindows
ShowScrollBar
GetDlgItem
DrawTextA
SystemParametersInfoA
SetTimer
GetDC
LoadKeyboardLayoutA
GetClassNameA
OpenClipboard
GetWindow
RegisterWindowMessageA
RedrawWindow
SetWindowsHookExA
CharNextA
DrawEdge
GetClassInfoA
ShowOwnedPopups
GetActiveWindow
SetScrollRange
DrawIcon
GetWindowDC
GetKeyboardType
LoadStringA
LoadIconA
GetLastActivePopup
SetCapture
AdjustWindowRectEx
GetClientRect
SetScrollInfo
GetCursor
TranslateMDISysAccel
TranslateMessage
MoveWindow
SetForegroundWindow
SetWindowLongA
InsertMenuItemA
ShowWindow
GetKeyboardLayoutList
MessageBeep
GetDCEx
EnumThreadWindows
FindWindowA
SetMenu
OemToCharA
InvalidateRect
EnumChildWindows
EnableMenuItem
GetWindowTextA
IntersectRect
SetActiveWindow
GetWindowPlacement
UnhookWindowsHookEx
DestroyWindow
CloseClipboard
CreateIcon
version
VerFindFileA
VerInstallFileA
GetFileVersionInfoSizeA
kernel32
ExitThread
IsBadReadPtr
GetCommandLineA
GetVersionExA
GetLastError
LoadLibraryExA
GetOEMCP
GetProcAddress
VirtualAlloc
GlobalAlloc
LoadLibraryA
GetCommandLineW
VirtualAllocEx
GetModuleHandleA
comctl32
ImageList_Remove
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES0 Size: 512B - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES3 Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ