Static task
static1
Behavioral task
behavioral1
Sample
52511095f8b9d4e776cf932c149ae815.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52511095f8b9d4e776cf932c149ae815.exe
Resource
win10v2004-20231222-en
General
-
Target
52511095f8b9d4e776cf932c149ae815
-
Size
58KB
-
MD5
52511095f8b9d4e776cf932c149ae815
-
SHA1
7575ab210c020b8f3ca00af542d8b1e33d731af9
-
SHA256
4a790a82a09a885a3f451d44663961177cca15e2635779b90bb89d6257698be8
-
SHA512
0872d9418ae6cfd5d7b9e2a61eff7c030236ea849cf13659b00a588f4925d975da72c8b1c13def90a764bb92272eef646e99afeedb7c4a42fa9e13826090289e
-
SSDEEP
768:oNhTqJjfayjagb4K4RVjfARZXvuJVku/EN+OOJ0ne8Y3gCNlED1IqNFwiq8Ds:ekjfaFg0Nr7AL6SueE0zyNED1Xr/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52511095f8b9d4e776cf932c149ae815
Files
-
52511095f8b9d4e776cf932c149ae815.exe windows:4 windows x86 arch:x86
83702dea2949b6ae59cc95a9a4519aca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
ReleaseMutex
GetProcessHeap
GetModuleHandleA
GetExitCodeProcess
TlsGetValue
lstrlenW
TlsAlloc
CreateFileA
GetCurrentThreadId
DeleteAtom
HeapCreate
GlobalFree
CreateMutexA
GetEnvironmentVariableA
GlobalUnlock
GetStdHandle
CloseHandle
FindResourceA
LoadLibraryExA
user32
CheckRadioButton
GetCaretPos
GetDlgItem
DrawEdge
GetDC
CreateWindowExA
IsWindow
DrawMenuBar
DispatchMessageA
FillRect
CreateMenu
CallWindowProcA
SetFocus
rsaenh
CPDecrypt
CPHashData
CPDeriveKey
CPGenKey
CPSignHash
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
swvslsc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE