Static task
static1
Behavioral task
behavioral1
Sample
52210d11c151c808f5bb5a30642809ca.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
52210d11c151c808f5bb5a30642809ca.exe
Resource
win10v2004-20231222-en
General
-
Target
52210d11c151c808f5bb5a30642809ca
-
Size
356KB
-
MD5
52210d11c151c808f5bb5a30642809ca
-
SHA1
b1c8f81cb62c1b28d7a52c7e465a376a03e14d84
-
SHA256
12281186d195ebffa01ae8d5f292483bf40c4e2161dc56ee08d88de628192433
-
SHA512
58f16910ad2cacdfe650a436847d8f377fc586c4a205a0bb1c439206b04e7e062a67b09e0300a8fae8c226e3c1ed76c0edc028f8ba51091e803f91669d11a938
-
SSDEEP
6144:X6IpHcTRrb7A568tjA479LlwhIXSG0YxocUbAicKH:X5H41/RY79LlwhmBxTR2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52210d11c151c808f5bb5a30642809ca
Files
-
52210d11c151c808f5bb5a30642809ca.exe windows:4 windows x86 arch:x86
7aff8af39bac8c70d4e42ed23c6fbf08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassA
CharLowerA
ReleaseDC
IsWindowEnabled
GetInputDesktop
GetGUIThreadInfo
DefFrameProcA
ChangeDisplaySettingsA
IsRectEmpty
UpdateWindow
CreateWindowExA
DestroyIcon
DrawStateA
GetWindowModuleFileNameA
ShowWindow
MessageBoxA
GetWindowThreadProcessId
DrawTextExA
GetWindowRgn
LockWindowUpdate
EnumDesktopWindows
PaintDesktop
GetMenuCheckMarkDimensions
DdeReconnect
GetCapture
EnumDisplayMonitors
RegisterClassExA
ChangeDisplaySettingsExW
MsgWaitForMultipleObjectsEx
CharToOemBuffW
kernel32
HeapReAlloc
TerminateProcess
GetModuleHandleA
SetConsoleCtrlHandler
VirtualFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeA
TlsFree
GetFileType
IsValidCodePage
WideCharToMultiByte
GetAtomNameA
IsDebuggerPresent
GetProcessHeap
MoveFileW
ReadFileEx
QueryPerformanceCounter
OpenMutexA
GetSystemDefaultLangID
GetSystemTimeAsFileTime
GetTimeZoneInformation
TlsAlloc
EnumResourceTypesW
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineA
TlsGetValue
Sleep
HeapAlloc
LCMapStringA
GetLocaleInfoW
CreateFileMappingA
InterlockedDecrement
WriteConsoleW
CompareStringA
GetModuleFileNameW
GetEnvironmentStringsW
CreateDirectoryA
FreeLibrary
SetThreadContext
GetVersionExA
GlobalSize
CompareStringW
DeleteCriticalSection
GetACP
GetLocaleInfoA
SetHandleCount
MultiByteToWideChar
GetStartupInfoA
WriteFile
ExitProcess
UnmapViewOfFile
ReadFile
VirtualAlloc
FreeEnvironmentStringsW
EnterCriticalSection
InitializeCriticalSection
GetDateFormatA
HeapFree
VirtualQuery
GetTickCount
TlsSetValue
WriteConsoleA
GetFileTime
SetFilePointer
GetTimeFormatA
GetNamedPipeInfo
MoveFileExA
CompareFileTime
SetLastError
LCMapStringW
GetStringTypeW
GetEnvironmentStrings
HeapDestroy
LeaveCriticalSection
SetStdHandle
GetCurrentThread
CreateMutexA
EnumSystemLocalesA
RemoveDirectoryW
GetProfileSectionW
GetModuleFileNameA
GetConsoleCP
SetEnvironmentVariableA
LoadLibraryA
CloseHandle
GetCommandLineW
GetOEMCP
GetUserDefaultLCID
VirtualAllocEx
InitializeCriticalSectionAndSpinCount
GetStdHandle
GetCPInfo
FreeEnvironmentStringsA
GetStartupInfoW
GetCurrentProcess
GetConsoleMode
GetProcAddress
GetSystemDirectoryW
HeapSize
GetLastError
GetNumberFormatA
RtlUnwind
InterlockedExchange
InterlockedIncrement
FlushFileBuffers
CreateFileA
HeapCreate
GetConsoleOutputCP
GetDiskFreeSpaceExW
IsValidLocale
comctl32
ImageList_SetFlags
ImageList_LoadImageW
InitCommonControlsEx
ImageList_Write
ImageList_BeginDrag
Sections
.text Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ