Static task
static1
Behavioral task
behavioral1
Sample
5f5be3c4315df7be4cead10b1ffb87cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5f5be3c4315df7be4cead10b1ffb87cd.exe
Resource
win10v2004-20231215-en
General
-
Target
5f5be3c4315df7be4cead10b1ffb87cd
-
Size
1.4MB
-
MD5
5f5be3c4315df7be4cead10b1ffb87cd
-
SHA1
d9362edfa3cc2aad576a62b7d62cb20d36b55948
-
SHA256
38e2e15b971ae81a3a96a06ea2c5a68bb45cf13c28246132f3974a8432bfe64d
-
SHA512
a8aa60339fa03c852b1a7940b02bba99f48a338fc20ee50da5d9e2ddc12eb6697a0176ea31ca9ef865476bd25b89184d6c89fdf99468a8194076f074c9395f47
-
SSDEEP
24576:Vv1N7U82PsGelOS2wcBeWc5MXfsoYyTCRzmnhOmQ56fx1nZYqd74URjgh/65KS1Y:drw82PsG6OAcBeX5i4RzmRs6TU2jq655
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f5be3c4315df7be4cead10b1ffb87cd
Files
-
5f5be3c4315df7be4cead10b1ffb87cd.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 214KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kqsriccb Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pmvhjbnj Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE