Static task
static1
Behavioral task
behavioral1
Sample
5169bc912596e3226be8c41fb6cbd82a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5169bc912596e3226be8c41fb6cbd82a.exe
Resource
win10v2004-20231222-en
General
-
Target
5169bc912596e3226be8c41fb6cbd82a
-
Size
240KB
-
MD5
5169bc912596e3226be8c41fb6cbd82a
-
SHA1
7bdf4877fb81ebe94cb113de492cb083e4445935
-
SHA256
74cf92f5be94722e6d9a30cb65fa7a191c8a6a05c3d621eddb17010f32cde965
-
SHA512
3e284813b252cefc3fbdba61e227427832c24ed4a9abe1ca188c0a6257c7320257bf77f4c8140ffa57c81474ec7eef6aa488092907f61c6816c71f9cfca799c6
-
SSDEEP
6144:eMT7z4TnHOR6oTjDQ2M6GDoD0qKFsBA4+SH:eMT7EHuFM6GDI0qI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5169bc912596e3226be8c41fb6cbd82a
Files
-
5169bc912596e3226be8c41fb6cbd82a.exe windows:4 windows x86 arch:x86
c2c8e36fcf49be90ab9edfbc9d0a8f20
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
SetFilePointerEx
FileTimeToLocalFileTime
EnumResourceNamesW
WaitForSingleObjectEx
user32
SetMenuContextHelpId
DrawCaption
IsCharLowerA
DeregisterShellHookWindow
GetInputState
GetSysColorBrush
LoadKeyboardLayoutW
DdeFreeDataHandle
gdi32
OffsetClipRgn
CreateHatchBrush
CreateRectRgnIndirect
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 602B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE