Static task
static1
Behavioral task
behavioral1
Sample
51c8717fc76753c67a698b5b674d4360.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51c8717fc76753c67a698b5b674d4360.exe
Resource
win10v2004-20231215-en
General
-
Target
51c8717fc76753c67a698b5b674d4360
-
Size
56KB
-
MD5
51c8717fc76753c67a698b5b674d4360
-
SHA1
8a89144b6ff8a90ec8fd1f3260be8426bc593827
-
SHA256
54f03635072405d44f1f8637930104903621fff9f5ddcd21cc2855d284be6a79
-
SHA512
8788c1bd458ac7d9b51a995605f1011679290af82666704acb459e1596ca50dc9f122db8289836a64e6c55d7715e20be756d9fc8ab3d8a91d905856fec837b23
-
SSDEEP
1536:5KiGe8JwUvPc2EZx2uh072BZOs5KqPlBoe:5Ky8Jw46ZZ272BQs5KwBoe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51c8717fc76753c67a698b5b674d4360
Files
-
51c8717fc76753c67a698b5b674d4360.exe windows:5 windows x86 arch:x86
879c0ec3141913c0932920f13f2073b0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptAcquireContextW
GetUserNameW
RegEnumKeyExA
RegSetValueExA
shlwapi
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
user32
DispatchMessageA
DrawIcon
ExitWindowsEx
GetCursorPos
GetMenuItemID
LoadCursorA
MsgWaitForMultipleObjects
PeekMessageA
SetThreadDesktop
ToUnicode
Sections
.vujuz Size: 46KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.urmz Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pglmn Size: 6KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ