Static task
static1
Behavioral task
behavioral1
Sample
523b272ea86cae742b4bbae1d9a14507.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
523b272ea86cae742b4bbae1d9a14507.exe
Resource
win10v2004-20231222-en
General
-
Target
523b272ea86cae742b4bbae1d9a14507
-
Size
282KB
-
MD5
523b272ea86cae742b4bbae1d9a14507
-
SHA1
8ad3ffaf72403ce752b66a88a8ff132c08f4fbdc
-
SHA256
18b663e7e2b4e3474d389174dc5c4cab0aa246857ce5b39ec9693d77c6db77ed
-
SHA512
c768f1ad5e4f50439e7b52e7ae8aea58166f2d5f59601ae7fd73b1aeaec86fd6e610aef260d17ff54105c6a26f82684ea275ce083b30788b6a29de7007b6b0ca
-
SSDEEP
6144:NQNABoxbFWlK6la286EjFp79u2WCJiWuBqXOoAO4z8EmMHC:NQNOoxslzaD69WuBq1Q6MHC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 523b272ea86cae742b4bbae1d9a14507
Files
-
523b272ea86cae742b4bbae1d9a14507.exe windows:6 windows x86 arch:x86
a4abf634f7ed02bacf63a22abb2369e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegCreateKeyA
user32
MessageBoxA
kernel32
WriteConsoleW
HeapSize
Sleep
ExitProcess
GetCurrentThread
GetThreadContext
SetThreadContext
GetTickCount
VirtualAllocEx
ReadProcessMemory
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetConsoleWindow
FlsAlloc
GetCurrentProcess
GetSystemInfo
VirtualAllocExNuma
LoadLibraryA
K32GetProcessMemoryInfo
GetLastError
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
MultiByteToWideChar
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
CreateFileW
RaiseException
RtlUnwind
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
SetEndOfFile
Sections
.text Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ