Static task
static1
Behavioral task
behavioral1
Sample
5141ef76a9f057066905b14b4fac4a06.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5141ef76a9f057066905b14b4fac4a06.exe
Resource
win10v2004-20231215-en
General
-
Target
5141ef76a9f057066905b14b4fac4a06
-
Size
126KB
-
MD5
5141ef76a9f057066905b14b4fac4a06
-
SHA1
340d130c846736efb2f1e7e5704295988deb806e
-
SHA256
818480055b46faa0d3a7ee70c6ab845d588f2d7ff09bc7b77be9be71e8bb6271
-
SHA512
db078daf4727479bbdafdbe33de229c699786ea5d16b836f98e064dc1ce6d0971edb040649240d069d1aa5603b325b6822ffc3a4e4648ce10d2359eb028b9956
-
SSDEEP
3072:TZ4J0UgQK/Rgqq/OByaXoojnXUjm5jRn+k17XMmZSpZ:TbUg1/lkOfjXUjm3n+cX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5141ef76a9f057066905b14b4fac4a06
Files
-
5141ef76a9f057066905b14b4fac4a06.exe windows:4 windows x86 arch:x86
3edcbee954012d59c133063298e9150a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteKeyA
RegDeleteValueA
GetLengthSid
version
GetFileVersionInfoSizeA
VerInstallFileA
VerFindFileA
comctl32
ImageList_Draw
ImageList_Read
ImageList_Write
comdlg32
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
kernel32
GlobalDeleteAtom
IsBadReadPtr
GetCommandLineW
GetCommandLineA
GetACP
ExitProcess
GetModuleHandleA
GetOEMCP
LoadLibraryExA
lstrlenA
GetProcAddress
LoadLibraryA
VirtualAlloc
FindResourceA
ExitThread
ole32
OleCreateStaticFromData
CoRevokeClassObject
CoGetMalloc
StgOpenStorage
CreateStreamOnHGlobal
CLSIDFromProgID
CoCreateInstanceEx
CoReleaseMarshalData
CoCreateGuid
CLSIDFromString
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ