Static task
static1
Behavioral task
behavioral1
Sample
53a83b6813964def27e5bd0b60822893.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
53a83b6813964def27e5bd0b60822893.exe
Resource
win10v2004-20231222-en
General
-
Target
53a83b6813964def27e5bd0b60822893
-
Size
148KB
-
MD5
53a83b6813964def27e5bd0b60822893
-
SHA1
ce2419e55277b74851b4cb837ca73ef9dab9f668
-
SHA256
34a8c2b07c7b191ed78760bc23b0f4c55c14bf9e9433b6e19de6f67e394b4846
-
SHA512
49996813fed1baa81a9eb2eed21df8ec899ee2f1a7a6b4e43ffc110c832dc0887e4827b36289b91d48678eb628809d6a7e65b6357db79614fe88a37aad0bdae6
-
SSDEEP
1536:hHOdiMQVc4LgUkMNRqlptlq96nXk9VkLtzpq1fTOhQHPyF814k1iLlVovbBnU1vo:yiNdG0iqZUQHaFO4LsTdU1S5kAojZC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53a83b6813964def27e5bd0b60822893
Files
-
53a83b6813964def27e5bd0b60822893.exe windows:4 windows x86 arch:x86
f2a70af54c71761685a22d58dea2f157
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
FtpOpenFileA
HttpQueryInfoA
InternetOpenUrlA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetReadFile
FtpSetCurrentDirectoryA
FtpFindFirstFileA
InternetFindNextFileA
comctl32
ord17
kernel32
ReadFile
SetFilePointer
CreateFileA
GetFileSize
WriteFile
CloseHandle
SetFileAttributesA
GetFileAttributesA
WaitForSingleObject
CreateMutexA
DeleteFileA
CreateThread
CreateProcessA
LCMapStringA
CreateDirectoryA
GetCurrentProcess
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetProcAddress
HeapSize
HeapAlloc
SetEndOfFile
LCMapStringW
TerminateProcess
HeapReAlloc
RaiseException
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapFree
SetStdHandle
RtlUnwind
GetLastError
MoveFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
user32
EndPaint
GetDlgItem
SendDlgItemMessageA
SetDlgItemTextA
DestroyWindow
LoadIconA
RegisterClassA
LoadCursorA
DefWindowProcA
PostQuitMessage
BeginPaint
ReleaseDC
GetDC
EndDialog
DialogBoxParamA
LoadStringA
MessageBoxA
SetFocus
gdi32
SelectObject
GetCurrentObject
GetStockObject
CreateCompatibleDC
BitBlt
DeleteDC
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ