Static task
static1
Behavioral task
behavioral1
Sample
5770c8f1155c49f60cb7fd39487eaa11.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5770c8f1155c49f60cb7fd39487eaa11.exe
Resource
win10v2004-20231215-en
General
-
Target
5770c8f1155c49f60cb7fd39487eaa11
-
Size
19KB
-
MD5
5770c8f1155c49f60cb7fd39487eaa11
-
SHA1
2fc53c3b375aaff6220f2daae22fbd5ee0728e78
-
SHA256
a8ea55aa3be23b27982376e217f61f4b121f84a26093fdf079ca0e023db73fd9
-
SHA512
e17a37beea3728528f780b06de236b7bea6a983e1de86e8cea2637148e27fefcdcbc3e9e4ff9ea92a19d702fd91b2f934dcfec896c41798395c319abc9d3c6ba
-
SSDEEP
384:9fVZM+Sl22x6WxSuAL1MuL6q2KVUcchgfAZw4c+w39/f26U0B98:jZnIyMZgQc+wV26bM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5770c8f1155c49f60cb7fd39487eaa11
Files
-
5770c8f1155c49f60cb7fd39487eaa11.exe windows:4 windows x86 arch:x86
565c7255179f28323d147ff96d2d99ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
FindWindowExA
FindWindowA
wsprintfA
kernel32
FindNextFileA
FreeLibrary
GetDiskFreeSpaceA
GetDriveTypeA
GetLogicalDrives
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetVersionExA
GetVolumeInformationA
FindFirstFileA
GlobalMemoryStatus
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
ReadFile
SetFileAttributesA
SetFilePointer
Sleep
WideCharToMultiByte
WriteFile
FindClose
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
ExitProcess
CreateThread
CreateFileA
CopyFileA
CloseHandle
GetWindowsDirectoryA
lstrcatA
wsock32
WSAStartup
closesocket
connect
gethostbyname
gethostname
socket
recv
send
advapi32
GetSidSubAuthority
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetUserNameA
RegCloseKey
RegCreateKeyA
RegEnumKeyExA
RegQueryValueExA
RegSetValueExA
IsValidSid
LookupAccountNameA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
ole32
CoTaskMemFree
rasapi32
RasGetEntryDialParamsA
RasGetEntryPropertiesA
RasEnumEntriesA
Sections
Size: 14KB - Virtual size: 13KB
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 132KB
IMAGE_SCN_MEM_WRITE
Size: 257B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE