Static task
static1
Behavioral task
behavioral1
Sample
5195343802fdbc63101cd8bca6a4b180.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5195343802fdbc63101cd8bca6a4b180.exe
Resource
win10v2004-20231215-en
General
-
Target
5195343802fdbc63101cd8bca6a4b180
-
Size
261KB
-
MD5
5195343802fdbc63101cd8bca6a4b180
-
SHA1
20aeebc6c369c6ff0c5350ddf89d8c4ff35b9c3a
-
SHA256
22f68580df6b39cd9eb0f30fda0ac2898b71456246ecf9e7897627a4dcfbd38f
-
SHA512
487f13a0df710f07465791beaf87b004afaa4f083bd7ce34f9aae54e7d66117da9b12d02dab1b4c4775ef7650c57473a8a67067c69ad32aefc32aa9a223956c7
-
SSDEEP
6144:96aGmgBm3w8gzPjD44e3NJQ8U7OF1sW8dWvYkWGKsHz4wnh:9lP3AzPj84M3QbsfvYov4w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5195343802fdbc63101cd8bca6a4b180
Files
-
5195343802fdbc63101cd8bca6a4b180.exe windows:4 windows x86 arch:x86
366e5a38496d9a866e75c30e63b77ba3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
CharLowerA
GetPropA
WindowFromPoint
PtInRect
CloseClipboard
DispatchMessageA
SendMessageA
GetLastActivePopup
InvalidateRect
GetSubMenu
TranslateMDISysAccel
GetKeyboardLayout
GetMenuItemCount
UnregisterClassA
AdjustWindowRectEx
LoadKeyboardLayoutA
FillRect
SetActiveWindow
IsWindowEnabled
DefMDIChildProcA
GetClassNameA
DefFrameProcA
IsWindowVisible
GetWindow
GetKeyboardType
GetMenu
SetScrollInfo
MapWindowPoints
GetFocus
IsRectEmpty
GetScrollInfo
GetKeyboardState
DrawIcon
EnumWindows
IsWindowUnicode
GetKeyboardLayoutList
CallNextHookEx
GetIconInfo
wsprintfA
RemovePropA
InflateRect
GetClassInfoA
DrawMenuBar
FrameRect
IntersectRect
CharLowerBuffA
SetMenu
GetMessagePos
ActivateKeyboardLayout
GetDCEx
MessageBoxA
BeginPaint
IsDialogMessageW
SetMenuItemInfoA
SetWindowLongA
IsZoomed
GetForegroundWindow
GetMenuStringA
GetMenuItemInfoA
IsWindow
CallWindowProcA
GetCursor
MsgWaitForMultipleObjects
EnableMenuItem
InsertMenuA
SetRect
SetPropA
DeleteMenu
RegisterClipboardFormatA
GetSysColor
SetFocus
TranslateMessage
DestroyIcon
IsChild
GetDlgItem
DrawTextA
IsIconic
CreateMenu
GetDesktopWindow
CharToOemA
GetClientRect
DrawAnimatedRects
SetParent
GetSystemMenu
GetClipboardData
GetWindowLongA
InsertMenuItemA
SetClassLongA
GetDC
CheckMenuItem
IsDialogMessageA
GetKeyboardLayoutNameA
GetClassLongA
gdi32
CreateBitmap
SetBkColor
CreateFontIndirectA
GetDIBColorTable
SetBkMode
CopyEnhMetaFileA
GetObjectA
BitBlt
kernel32
SetEndOfFile
SetFilePointer
lstrlenA
GetProcAddress
LoadLibraryA
SizeofResource
GetModuleHandleA
RaiseException
GetCommandLineW
lstrcmpiA
LocalFree
SetHandleCount
VirtualAllocEx
IsBadHugeReadPtr
SetEvent
MoveFileExA
HeapDestroy
ReadFile
lstrcmpA
VirtualAlloc
IsBadReadPtr
VirtualQuery
ResetEvent
GetACP
ExitThread
SetLastError
ExitProcess
SetThreadLocale
GetLastError
lstrcpynA
WaitForSingleObject
WriteFile
WideCharToMultiByte
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES50 Size: 512B - Virtual size: 181B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES06 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES72 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES18 Size: 1024B - Virtual size: 657B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES45 Size: 512B - Virtual size: 299B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES52 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES40 Size: 1024B - Virtual size: 913B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES08 Size: 1024B - Virtual size: 767B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ