Static task
static1
Behavioral task
behavioral1
Sample
5471efdcff11de0e35567f20bc094137.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5471efdcff11de0e35567f20bc094137.exe
Resource
win10v2004-20231215-en
General
-
Target
5471efdcff11de0e35567f20bc094137
-
Size
375KB
-
MD5
5471efdcff11de0e35567f20bc094137
-
SHA1
25faaefdace2337b1af273759a5bab52d329a4cb
-
SHA256
a2145b629abfe904d4458fb9ba854e1192c063e85744c1fb23bc766d81e95d1c
-
SHA512
ad33b90659d91a5bf320598be2481883cbb2dd0743b3832df575792c52cbdcdb34d720639f66fe7abc6bbd28a1079b5bb61209951c98e9f48ed084d82e13568b
-
SSDEEP
6144:7GT8RPFQaO6ETgnS7SEIWLZ6F685OMgQ0K/KckHbvWMRCHpyIkgGFlch:zRPFQaOz8S3B6Fp1gQX/KtHbOMRCkr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5471efdcff11de0e35567f20bc094137
Files
-
5471efdcff11de0e35567f20bc094137.exe windows:4 windows x86 arch:x86
b0367c3e47a3ed9d92fb6f9381e6ceff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
SetClassLongA
SetCapture
SetClipboardData
gdi32
SetBkMode
ole32
StgOpenStorage
CoGetObjectContext
kernel32
GetProcAddress
GetCommandLineW
ExitProcess
IsBadHugeReadPtr
GetLastError
ExitThread
GetOEMCP
LoadLibraryA
GlobalAlloc
LoadLibraryExA
lstrlenA
VirtualAllocEx
VirtualAlloc
GetModuleHandleA
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 293KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RSRC9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC4 Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC0 Size: 1024B - Virtual size: 999B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC6 Size: 1024B - Virtual size: 814B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RSRC2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC1 Size: 1024B - Virtual size: 982B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ