?gawjKuciDW@@YGPAIMPAE@Z
Static task
static1
Behavioral task
behavioral1
Sample
54df9035034cc043529482c04d36f8bd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
54df9035034cc043529482c04d36f8bd.exe
Resource
win10v2004-20231222-en
General
-
Target
54df9035034cc043529482c04d36f8bd
-
Size
175KB
-
MD5
54df9035034cc043529482c04d36f8bd
-
SHA1
b716ebb43deac463c7f41c147534772b4e2e52be
-
SHA256
e3737c56101d40346c4a4bf4456b9e4be4803e7782cd711fc24fb2dbfcd27793
-
SHA512
af02e18d5b84ba41c1ee067ee79dbcd27b824d76ffb9c438fb54b4eceb15a9dc9e90a75074347c819544067ff213d2dd92041eda3a95a43f5e92375fa681276e
-
SSDEEP
3072:orvBXI78ijofNk29SXI+kXp3nR00vSnUYg30ysI6k2:gvBXUzIeRXIZXp3nK0vsH1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54df9035034cc043529482c04d36f8bd
Files
-
54df9035034cc043529482c04d36f8bd.exe windows:5 windows x86 arch:x86
e540aac697e52d7facfc045d6e3a5d8a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wvsprintfA
IsCharLowerA
DestroyMenu
GetWindow
GetClassWord
OpenDesktopW
DialogBoxParamA
GetSystemMetrics
FindWindowA
SetTimer
ShowScrollBar
CallWindowProcA
GetPropW
IsCharAlphaW
shlwapi
StrCmpNA
gdi32
OffsetViewportOrgEx
GetPaletteEntries
EndPath
RealizePalette
CreateICW
ExcludeClipRect
EndPage
Rectangle
CreateEllipticRgnIndirect
kernel32
lstrcmpiA
SetThreadExecutionState
VirtualAlloc
GlobalFree
IsValidLocale
GetVersionExW
GlobalMemoryStatusEx
CreateRemoteThread
LockResource
GetFileTime
lstrlenA
ReleaseSemaphore
Exports
Exports
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 930B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ