Static task
static1
Behavioral task
behavioral1
Sample
5dcdefec115604edcfd98c5531df2fc6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5dcdefec115604edcfd98c5531df2fc6.exe
Resource
win10v2004-20231222-en
General
-
Target
5dcdefec115604edcfd98c5531df2fc6
-
Size
18KB
-
MD5
5dcdefec115604edcfd98c5531df2fc6
-
SHA1
1c00c8b64d99cff031e370698b94cf494ad32b9c
-
SHA256
c6f684661b7dc618c53dc29d51348ee7cdf14de3584ea74fc059bba225840ae4
-
SHA512
8fe7d525da4cb98a5409d29337f40982a3e60937a5d5ec14a619f39389dbb318dad4f5c845e5a29f1dc059cf7b5821cd88f26b57b62c0e888ff4baded68085eb
-
SSDEEP
384:h5+KScoFVEFVjpn+uVp0DtKtJQXG6o0nLjOAMCtqduNRvh:r+KcklT4DtKUm0nfMSpv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dcdefec115604edcfd98c5531df2fc6
Files
-
5dcdefec115604edcfd98c5531df2fc6.exe windows:4 windows x86 arch:x86
14d2c0dd6182d4fd902ed7e2f6cb394f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DisableThreadLibraryCalls
GetStartupInfoA
GetFileAttributesA
TlsSetValue
CreateFileW
GetModuleFileNameA
LeaveCriticalSection
SetFilePointer
TlsAlloc
GetFullPathNameA
lstrcpyW
LocalSize
SizeofResource
TerminateProcess
FormatMessageA
QueryPerformanceCounter
GetVersionExA
VirtualProtect
GetCurrentProcess
LocalLock
CreateDirectoryW
GetEnvironmentStrings
GetWindowsDirectoryA
GlobalLock
InterlockedDecrement
ExitProcess
WideCharToMultiByte
LoadLibraryExA
QueryPerformanceFrequency
CreateMutexA
ExpandEnvironmentStringsW
InterlockedIncrement
WriteFile
GetLocaleInfoA
GlobalReAlloc
LoadLibraryA
GetACP
MapViewOfFile
CompareStringW
CompareStringA
GetUserDefaultLCID
GetCommandLineW
FindFirstFileW
GetLocaleInfoW
SetHandleCount
VirtualAlloc
MultiByteToWideChar
GlobalFree
GetConsoleCP
LocalReAlloc
TlsFree
LocalFree
CloseHandle
lstrcatW
GetEnvironmentStringsW
ReadFile
GetLastError
GetCurrentThreadId
FindClose
DeleteCriticalSection
GetProcAddress
GetShortPathNameA
InterlockedCompareExchange
GetTimeFormatW
MulDiv
GetFileInformationByHandle
Sleep
UnhandledExceptionFilter
LocalAlloc
GetStringTypeA
HeapReAlloc
GetSystemTimeAsFileTime
GetDateFormatW
SetErrorMode
WaitForMultipleObjects
GetLocalTime
FileTimeToLocalFileTime
UnmapViewOfFile
CreateFileMappingW
SetLastError
GetOEMCP
IsDBCSLeadByte
GetVersion
GetFileAttributesW
GetTickCount
SetUnhandledExceptionFilter
RaiseException
LCMapStringA
LocalFileTimeToFileTime
lstrcmpiA
HeapDestroy
SetEndOfFile
GetCurrentProcessId
SetEvent
lstrcpynW
lstrlenA
GlobalUnlock
RtlUnwind
lstrlenW
LoadLibraryW
InitializeCriticalSection
EnterCriticalSection
VirtualFree
DeleteFileW
lstrcmpiW
GetModuleHandleA
GetShortPathNameW
GetTempPathA
FindResourceW
GetUserDefaultUILanguage
LocalUnlock
HeapFree
GetVersionExW
WaitForSingleObject
GetSystemTime
FoldStringW
FormatMessageW
lstrcmpW
gdi32
CreateFontIndirectW
TextOutW
AbortDoc
GetDeviceCaps
GetTextMetricsW
SetAbortProc
StartPage
SetBkMode
EndPage
EndDoc
SetViewportExtEx
GetTextFaceW
SetWindowExtEx
DeleteObject
CreateDCW
LPtoDP
DeleteDC
GetTextExtentPoint32W
EnumFontsW
GetStockObject
StartDocW
GetObjectW
SetMapMode
SelectObject
user32
GetAsyncKeyState
GetParent
GetDlgCtrlID
EndDialog
SetWindowTextW
InvalidateRect
GetMessagePos
SetWindowLongW
LoadAcceleratorsW
GetMessageW
MessageBoxW
ScreenToClient
KillTimer
PostMessageA
LoadCursorW
GetSystemMenu
SetWindowPlacement
MessageBeep
SetTimer
GetMenu
wsprintfW
GetCursorPos
CharUpperW
DispatchMessageW
GetScrollPos
CreateDialogParamW
TranslateAcceleratorW
LoadIconW
BeginPaint
GetClientRect
GetWindowLongW
SetForegroundWindow
ChildWindowFromPoint
GetForegroundWindow
PeekMessageW
DestroyWindow
GetDlgItem
CreateWindowExW
UnhookWinEvent
SetCursor
CloseClipboard
SetDlgItemTextW
GetSysColorBrush
DialogBoxParamW
LoadImageW
IsClipboardFormatAvailable
SetActiveWindow
MessageBoxA
EndPaint
SendMessageA
EnableWindow
SetScrollPos
SetWinEventHook
IsDialogMessageW
TranslateMessage
CharNextW
ClientToScreen
PostQuitMessage
IsIconic
GetDesktopWindow
RegisterWindowMessageW
CharNextA
UpdateWindow
RegisterClassExW
GetWindowPlacement
LoadStringW
SendMessageW
GetSystemMetrics
PostMessageW
WinHelpW
ReleaseDC
TrackPopupMenu
CheckMenuItem
MoveWindow
DestroyIcon
DefWindowProcW
LoadBitmapA
GetWindowTextA
GetSubMenu
SendDlgItemMessageW
GetMenuState
GetFocus
GetDC
GetWindowRect
EnableMenuItem
ShowWindow
GetDlgItemTextW
DeleteMenu
GetWindowTextW
CharLowerW
GetKeyboardLayout
DestroyMenu
DrawTextExW
SetFocus
OpenClipboard
msvcrt
_cexit
localtime
time
_exit
__p__fmode
exit
__setusermatherr
_stricmp
_snwprintf
_acmdln
__dllonexit
memmove
__p__commode
iswctype
wcsncmp
_controlfp
_fileno
_XcptFilter
__getmainargs
_wtol
wcsncpy
_initterm
_adjust_fdiv
__set_app_type
_c_exit
_callnewh
shell32
DragQueryFileW
DragAcceptFiles
DragFinish
ShellAboutW
comctl32
CreateStatusWindowW
comdlg32
PrintDlgExW
FindTextW
GetOpenFileNameW
GetSaveFileNameW
ChooseFontW
CommDlgExtendedError
ReplaceTextW
GetFileTitleW
PageSetupDlgW
winspool.drv
ClosePrinter
OpenPrinterW
GetPrinterDriverW
advapi32
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegCreateKeyW
RegSetValueExW
IsTextUnicode
RegOpenKeyExA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ