Static task
static1
Behavioral task
behavioral1
Sample
5e1d1a713c8dbc3d6803746d7d1b25cb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5e1d1a713c8dbc3d6803746d7d1b25cb.exe
Resource
win10v2004-20231215-en
General
-
Target
5e1d1a713c8dbc3d6803746d7d1b25cb
-
Size
68KB
-
MD5
5e1d1a713c8dbc3d6803746d7d1b25cb
-
SHA1
7db883c26f6c40bb9beef9eb6bff392b07a74962
-
SHA256
cfe79acf9235a8621e6aeec62a7f261dfe7f79654e4dfd22b0a172ff4ca04374
-
SHA512
567c4bf52ad5e5dcd5f4e69779de2fe781180448a4b835d98a2fdc10cd5f3f522fbe0736e64b51360ce29aa2bc68232c1bb438b53f0e068914b4325db59ea51c
-
SSDEEP
768:LqikiNFJG2ioDseTyycrjeHzEJsVmhAU5/H9HRo7pY6xRodP:L3NVvjOycrj6Ez5/H9HyboN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e1d1a713c8dbc3d6803746d7d1b25cb
Files
-
5e1d1a713c8dbc3d6803746d7d1b25cb.exe windows:4 windows x86 arch:x86
3bbc43c2777602d1390f7d2c7bb78fc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
libeay32
ord339
ord2147
ord785
kernel32
GetStartupInfoA
GetStringTypeW
GetStringTypeA
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetLastError
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
RaiseException
CloseHandle
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
CreateFileA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE