Static task
static1
Behavioral task
behavioral1
Sample
53f657f190f4ee339e23a32b243c0d5e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
53f657f190f4ee339e23a32b243c0d5e.exe
Resource
win10v2004-20231222-en
General
-
Target
53f657f190f4ee339e23a32b243c0d5e
-
Size
150KB
-
MD5
53f657f190f4ee339e23a32b243c0d5e
-
SHA1
04127b6c91ab1615c4249f1928c00de293d861e7
-
SHA256
e2ad718ce710b284ad73d051ed2276b22205faa8f8e7fdc55da9a93047b2f170
-
SHA512
51df84e98edb0486a12ff779d2f70d1eb2c9640e6197a0eed6568c0080c5e55ce68bae928ebae12ae42fa7aeba1771c8adcfb73f95faa2bb5e69f24904944090
-
SSDEEP
3072:dCOucr4iXDvSj9i1vnkIqjN+x+y1ojzU5pV:d7rurNOa6pV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53f657f190f4ee339e23a32b243c0d5e
Files
-
53f657f190f4ee339e23a32b243c0d5e.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 116KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
z56i3ftd Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gbtrs7fd Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ue0te2k2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ