Static task
static1
Behavioral task
behavioral1
Sample
53a75c9b50d98d2eb1db8e43d9d55c73.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
53a75c9b50d98d2eb1db8e43d9d55c73.exe
Resource
win10v2004-20231215-en
General
-
Target
53a75c9b50d98d2eb1db8e43d9d55c73
-
Size
81KB
-
MD5
53a75c9b50d98d2eb1db8e43d9d55c73
-
SHA1
c93904b96a660876ca78bf009dbbd728ef9a974c
-
SHA256
38ea3be5d889d11d354056e1ed4c99b199594329aee58658a105513d161920b0
-
SHA512
dcb85fdaf9efbf1e306010dcc4e67a34ce064e2022b5d8e03530eed65343b53071664947524f866b4c69ca7cc8b6a0a23d65b162113af132cd31c59d20bfc4a4
-
SSDEEP
768:6OUHKY1Td7/QgoGFbC9PnY6XlR1Up1RnG0kZNWAbAYdyAJ902rdO9HWONB4cztXL:6OUqY56pVnlR1ULsLZQmdb0wdi5zt7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53a75c9b50d98d2eb1db8e43d9d55c73
Files
-
53a75c9b50d98d2eb1db8e43d9d55c73.exe windows:4 windows x86 arch:x86
dbd17993be033b53057b46b55b61d6d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
VirtualProtect
SetLastError
GetDriveTypeW
GetCommandLineA
GetDiskFreeSpaceExW
IsBadCodePtr
Sleep
LocalFree
GetModuleHandleA
TlsGetValue
GetDateFormatA
PulseEvent
GetLastError
DeleteCriticalSection
FindClose
FreeConsole
IsBadReadPtr
LoadLibraryExW
EnumResourceTypesA
user32
CreateMenu
GetScrollBarInfo
CreateWindowExA
CloseWindow
GetKeyState
CopyImage
GetMessageA
EnableWindow
IsIconic
GetUpdateRect
DragDetect
DialogBoxParamA
DispatchMessageA
msasn1
ASN1BERDecEoid
ASN1BERDecBool
ASN1BERDecFlush
ASN1BERDecCheck
ASN1BERDecDouble
advapi32
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ