Static task
static1
Behavioral task
behavioral1
Sample
5e1a8d1d143c564f46af45e0b22896e2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5e1a8d1d143c564f46af45e0b22896e2.exe
Resource
win10v2004-20231215-en
General
-
Target
5e1a8d1d143c564f46af45e0b22896e2
-
Size
80KB
-
MD5
5e1a8d1d143c564f46af45e0b22896e2
-
SHA1
872799ed3c578b547f5bda8bafff8bcf5ef42780
-
SHA256
17a30b325d67b2120b72ac887a6cd67d936f721aa737088e5d3ea46006e52792
-
SHA512
0a31d0dfc0dc4f44232239c5dca3872314cbaf39ae384050648636532e49af8b2ea4f798b3e639070b76a2412b6f38e47b1a4628510d1d8e54b41341b270bf15
-
SSDEEP
1536:7HdWcLcRLSD/ZSm8DGmh3r3tRHR40clIjLk:7HnLh/ZSm8DtRb6n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e1a8d1d143c564f46af45e0b22896e2
Files
-
5e1a8d1d143c564f46af45e0b22896e2.exe windows:4 windows x86 arch:x86
8f70a1709fd87c064b452b95bde5a019
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
DrawTextA
LoadMenuA
CloseWindow
BlockInput
IsWindow
CopyRect
GetMenu
DrawIconEx
GetCursor
GetDlgItem
IsMenu
AppendMenuA
EndDialog
DrawTextW
DialogBoxParamA
CopyImage
GetFocus
GetDC
CreateIcon
CloseWindow
DialogBoxParamW
GetFocus
BlockInput
DrawIconEx
IsMenu
GetDC
DrawIcon
GetWindowTextLengthA
AppendMenuW
DialogBoxParamA
GetCursor
CopyIcon
CalcMenuBar
LoadMenuA
AppendMenuA
DrawTextW
CopyRect
InsertMenuA
advapi32
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueW
RegReplaceKeyA
RegCreateKeyExA
RegLoadKeyW
RegQueryInfoKeyA
RegEnumKeyExA
RegLoadKeyA
RegDeleteValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExA
RegQueryValueA
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyA
RegEnumKeyW
kernel32
GetFileAttributesA
GlobalFree
lstrcpyA
DeleteFileA
GetDateFormatA
lstrcatA
HeapFree
FreeLibrary
GetStringTypeW
GetModuleFileNameA
GetFileSize
GlobalAlloc
GetLocalTime
lstrcmpA
GetLastError
GetCPInfo
CloseHandle
lstrcpynA
GetModuleHandleA
GetStdHandle
comctl32
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_DragLeave
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DrawIndirect
ImageList_Create
ImageList_LoadImage
ImageList_Read
ImageList_AddMasked
ImageList_GetIcon
ImageList_LoadImageA
ImageList_EndDrag
ImageList_GetImageRect
ImageList_BeginDrag
ImageList_AddIcon
InitCommonControls
ImageList_GetImageInfo
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 4KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.res Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ