Static task
static1
Behavioral task
behavioral1
Sample
5d7838b03d57a29301fe3c21ff15527b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5d7838b03d57a29301fe3c21ff15527b.exe
Resource
win10v2004-20231215-en
General
-
Target
5d7838b03d57a29301fe3c21ff15527b
-
Size
145KB
-
MD5
5d7838b03d57a29301fe3c21ff15527b
-
SHA1
f5b8c680ac1a9d6c960df3d8d68372401986d5b9
-
SHA256
59f90c9f08f02856897222f3abb983394e7390df93b42ffebee1dbad4395587c
-
SHA512
d548b8c636df983f9f35b01f5908ab110786dad08ea667c33fe02b2db6c290cf6936c610ffd12c3fe4820c5c3a316744be588555e9a96b2c79e1e5cf3a7c000b
-
SSDEEP
3072:UlUDKdSVdlKmWzUqessh4XRHj9GJfM6nn5DJJq6IKzEBsv1bVBDBr:fzVSznBJGtn5DJUJ5i1p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d7838b03d57a29301fe3c21ff15527b
Files
-
5d7838b03d57a29301fe3c21ff15527b.exe windows:5 windows x86 arch:x86
332f3cf6460a206edcec157067b1404b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetShortPathNameA
lstrcmpiW
GetLocaleInfoW
VirtualProtect
WaitForSingleObject
GetStartupInfoA
GetLocalTime
DeviceIoControl
GetTempPathA
FlushFileBuffers
GetModuleHandleA
GetTempPathW
GetOEMCP
msvcrt
_controlfp
_cexit
sin
longjmp
__setusermatherr
__p__commode
__set_app_type
_acmdln
_assert
_putenv
_XcptFilter
__p__fmode
_except_handler3
exit
_adjust_fdiv
_initterm
__getmainargs
log
user32
EnumThreadWindows
LoadBitmapA
GetMenuItemCount
RemovePropA
RegisterClipboardFormatA
RegisterWindowMessageA
GetWindowRect
UpdateWindow
CharNextA
IsWindowEnabled
RemoveMenu
DeleteMenu
EnableWindow
version
VerQueryValueW
VerLanguageNameA
VerInstallFileA
VerInstallFileW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ole32
CoGetClassObject
OleInitialize
IIDFromString
CoDisconnectObject
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
gdi32
LPtoDP
CreatePolygonRgn
SelectPalette
CopyEnhMetaFileA
SetROP2
CopyMetaFileW
GetCharWidthW
GetSystemPaletteEntries
SaveDC
EnumFontsA
GetTextExtentPoint32A
comctl32
ImageList_DragShowNolock
ImageList_GetBkColor
PropertySheetW
ImageList_GetIconSize
ImageList_Destroy
ImageList_Draw
ImageList_SetOverlayImage
ImageList_Remove
DestroyPropertySheetPage
InitCommonControlsEx
oleaut32
SafeArrayPutElement
VariantCopy
SysAllocStringLen
SysAllocStringByteLen
CreateErrorInfo
SysStringByteLen
VariantCopyInd
shell32
SHGetPathFromIDList
ExtractAssociatedIconW
SHCreateDirectoryExA
SHGetDesktopFolder
SHBrowseForFolderW
SHGetFolderPathW
SHChangeNotify
ExtractIconW
SHFileOperationW
advapi32
RegSetValueExW
RegEnumKeyExW
SetSecurityDescriptorGroup
RegQueryValueExA
RegFlushKey
GetUserNameA
SetSecurityDescriptorDacl
CloseServiceHandle
RegOpenKeyA
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ