Static task
static1
Behavioral task
behavioral1
Sample
54be4d1e6ae2f15f3f142e735b3915d2.exe
Resource
win7-20231215-en
General
-
Target
54be4d1e6ae2f15f3f142e735b3915d2
-
Size
140KB
-
MD5
54be4d1e6ae2f15f3f142e735b3915d2
-
SHA1
f1e54721cb98482b36de97fc3e18429a12335504
-
SHA256
fb32dd5d3c6bcda1616c29a7cbe66da658bc236849fb470f36def5477f012926
-
SHA512
2301647f4cb751860f42cf277acfbcec6d2ce9e0ee2ae13769762ea539d64b629ccf250c3bd1a57728c9cd0304188df55b6260cf52250a0121d9b663a3d671e8
-
SSDEEP
3072:/RaoIPGFUOJ7vSj29fAtszwOgKqnw7qCEEl6:ZCUvJL6YfAsdSB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54be4d1e6ae2f15f3f142e735b3915d2
Files
-
54be4d1e6ae2f15f3f142e735b3915d2.exe windows:4 windows x86 arch:x86
801ecd4c2e35d494ac79179c3452d0e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
lstrcmpA
lstrcpyA
lstrlenA
GetLastError
OpenProcess
GetProcAddress
LoadLibraryA
Sleep
DeleteFileA
FindNextFileA
FindClose
CloseHandle
TerminateProcess
WideCharToMultiByte
SetHandleCount
GetEnvironmentStringsW
SetFileAttributesA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetCommandLineA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapReAlloc
RtlUnwind
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
WriteFile
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
user32
PostMessageA
FindWindowA
advapi32
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ