Static task
static1
Behavioral task
behavioral1
Sample
5362defc2b98a1fdac59fa785eb3b896.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5362defc2b98a1fdac59fa785eb3b896.exe
Resource
win10v2004-20231215-en
General
-
Target
5362defc2b98a1fdac59fa785eb3b896
-
Size
10KB
-
MD5
5362defc2b98a1fdac59fa785eb3b896
-
SHA1
f6dad7f5a1f99b116408dacfe741af6119833117
-
SHA256
f09be9cb3cc759b151cc9adaf1d2c9d5060de97050761591dea3d461c3e1789d
-
SHA512
852ed351097aa308d329d69b2059774b2ccd9bfaf094f69ece253fe7ff5f60ed5377b855c1d76f2cc2951b55f906095ed61282569a590dad13016a3202d42f10
-
SSDEEP
192:pDWaPYHqmG6DSyeEPEzvvZNofVluLjl5dSJEtxUI2X7+icErKz:p6aPYHqmG6DSyeEszT4luLTaEMSuri
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5362defc2b98a1fdac59fa785eb3b896
Files
-
5362defc2b98a1fdac59fa785eb3b896.exe windows:5 windows x86 arch:x86
0b4d44ab6401c61ac6c5ede54541b51c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PeekMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
RegisterClassExA
CharUpperBuffA
RegisterClassA
DefDlgProcA
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadIconA
EnableWindow
SetWindowTextA
DefWindowProcA
PostQuitMessage
kernel32
GetStartupInfoA
GetCommandLineA
SetEvent
GetModuleHandleA
CreateThread
lstrcmpiA
EnterCriticalSection
ResetEvent
LeaveCriticalSection
WaitForMultipleObjects
GetTickCount
GetProcessHeap
HeapAlloc
InitializeCriticalSection
CreateEventA
lstrcpyA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
Sleep
lstrlenA
lstrcmpA
rasapi32
RasSetEntryPropertiesA
RasEnumEntriesA
RasGetEntryPropertiesA
RasDialA
RasEnumDevicesA
RasHangUpA
RasEnumConnectionsA
RasGetConnectStatusA
RasGetErrorStringA
comctl32
ord17
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE