Static task
static1
Behavioral task
behavioral1
Sample
54475a28e6bf52d9d126e63865ebd96a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54475a28e6bf52d9d126e63865ebd96a.exe
Resource
win10v2004-20231215-en
General
-
Target
54475a28e6bf52d9d126e63865ebd96a
-
Size
39KB
-
MD5
54475a28e6bf52d9d126e63865ebd96a
-
SHA1
c9f8c76ebd30cfb505ec01c986e0582fcc96a0d7
-
SHA256
96cf23c18cefe005f97ccb2757780729661dd88193c03eb1e282d94a61b593a8
-
SHA512
6fcbfcec552587bed7d8d7193c02ebf8e8b3218f612bca048efb0306dbe45b207d17f06ee02e35491f96a1a35dca3aa26c4d7662df819f5ae88e0f5aeadbcc7b
-
SSDEEP
768:6zCzparfSi7aY7K4lrFz6deXa2h5rVo9QYh1fH:KCzpaZ7TlZz6H2Ubh1fH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54475a28e6bf52d9d126e63865ebd96a
Files
-
54475a28e6bf52d9d126e63865ebd96a.exe windows:4 windows x86 arch:x86
8fb7758cc4a4f19637b4b3687b3772a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueA
RegQueryValueExA
RegReplaceKeyW
RegEnumValueA
RegEnumKeyExW
RegQueryValueExW
RegLoadKeyW
RegCreateKeyW
RegOpenKeyExW
RegQueryValueA
RegQueryInfoKeyA
RegDeleteKeyW
RegCreateKeyExA
RegCreateKeyExW
RegReplaceKeyA
RegOpenKeyA
RegDeleteValueW
RegOpenKeyExA
RegEnumValueW
RegDeleteKeyA
RegQueryInfoKeyW
RegFlushKey
RegLoadKeyA
RegOpenKeyW
gdi32
BeginPath
SetTextColor
ClearBrushAttributes
AddFontResourceA
ExtTextOutA
ExcludeClipRect
GetDCOrgEx
GetCurrentPositionEx
AddFontMemResourceEx
GetPixel
CopyMetaFileA
GetClipBox
AddFontResourceExW
CancelDC
AddFontResourceExA
BitBlt
RestoreDC
AbortPath
DeleteDC
AddFontResourceW
CloseMetaFile
GetBrushOrgEx
GetPixel
comctl32
ImageList_LoadImageA
ImageList_DragMove
ImageList_DragEnter
ImageList_Read
ImageList_Destroy
ImageList_Remove
ImageList_Copy
ImageList_Replace
ImageList_AddIcon
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_DrawIndirect
ImageList_AddMasked
InitCommonControls
ImageList_LoadImage
ImageList_LoadImageW
ImageList_GetIcon
ImageList_DragLeave
ImageList_GetIconSize
ImageList_Create
ImageList_EndDrag
ImageList_AddIcon
ImageList_Create
ImageList_AddMasked
ImageList_LoadImage
ImageList_Destroy
ImageList_Read
ImageList_DrawIndirect
ImageList_GetImageInfo
ImageList_Draw
ImageList_DragShowNolock
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_Replace
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_ReplaceIcon
ImageList_Copy
ImageList_DragMove
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ImageList_DragEnter
ImageList_Replace
ImageList_GetIcon
ImageList_DrawEx
ImageList_AddIcon
ImageList_LoadImageA
ImageList_GetImageCount
ImageList_GetImageInfo
InitCommonControls
ImageList_Remove
ImageList_Create
ImageList_GetImageRect
ImageList_LoadImage
ImageList_LoadImageW
ImageList_DragLeave
ImageList_Destroy
kernel32
CopyFileW
CopyFileExA
GetFileTime
DeleteAtom
GetComputerNameA
ExitThread
OpenFileMappingA
CreateThread
CopyFileA
OpenFile
ReadFile
GetCommandLineA
FindAtomA
GlobalFree
CopyFileExW
ReadConsoleA
GetLastError
CreateThread
OpenFile
CopyFileExW
ReadFile
CopyFileA
DeleteFileW
GetConsoleMode
GlobalFree
SetLastError
CreateProcessA
CopyFileW
GetCPInfo
GetComputerNameA
GetFileTime
Sleep
ExitThread
FindAtomA
GetCommandLineA
GetStdHandle
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ