Static task
static1
Behavioral task
behavioral1
Sample
54f1ffea7bdaedfee77a96e37ec43583.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54f1ffea7bdaedfee77a96e37ec43583.exe
Resource
win10v2004-20231215-en
General
-
Target
54f1ffea7bdaedfee77a96e37ec43583
-
Size
517KB
-
MD5
54f1ffea7bdaedfee77a96e37ec43583
-
SHA1
400e667acb62f5eba3633d76c8d4b66a6a6a2491
-
SHA256
4c027f66ceefbfac5ee1deb7dca7f0bde466004ece6c04aecf8b4447f1df9d5d
-
SHA512
fa0ce2d2e944f46356443dcf0c688e38bc93bdb8f16ada6ed367317241d8b25438a1c23126b51e8deda775ce143a96dbe2f1cb05820c0301618f0215de295aba
-
SSDEEP
12288:UMHcjcNuWMvWyIRBwWzhqUqGzaXdNAGrzy8YsVK:SjcNv+yfw6ExnTrSsV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54f1ffea7bdaedfee77a96e37ec43583
Files
-
54f1ffea7bdaedfee77a96e37ec43583.exe windows:4 windows x86 arch:x86
8854134891b9585d05c5860663f91a45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
FindFirstUrlCacheContainerA
InternetGetCertByURL
InternetReadFileExA
GetUrlCacheGroupAttributeW
CreateUrlCacheEntryA
comctl32
ImageList_Destroy
CreateUpDownControl
ImageList_DrawEx
InitCommonControlsEx
CreateStatusWindow
user32
WINNLSGetIMEHotkey
OemKeyScan
SetDebugErrorLevel
MessageBoxW
GetClassInfoW
DefWindowProcA
ModifyMenuA
RegisterClassExA
SetClassWord
RemovePropW
RegisterClassA
TabbedTextOutA
ShowWindow
CreateWindowExW
GetMenuBarInfo
GetActiveWindow
EnumDisplaySettingsW
ActivateKeyboardLayout
DeferWindowPos
SetScrollRange
DestroyWindow
advapi32
CryptDestroyKey
RegEnumKeyA
RegCloseKey
RegOpenKeyExW
RegLoadKeyW
RegDeleteKeyW
InitiateSystemShutdownW
RegSetValueA
CryptReleaseContext
CryptSetProviderW
AbortSystemShutdownW
RegSetValueExW
RevertToSelf
RegQueryInfoKeyA
RegSetValueW
CryptGenKey
CryptSignHashW
CryptCreateHash
CryptImportKey
LookupPrivilegeValueW
kernel32
LeaveCriticalSection
GetTempPathA
WriteFile
CommConfigDialogA
CreateFileA
GetCurrentThread
InterlockedDecrement
QueryPerformanceCounter
TlsSetValue
CompareStringW
GetUserDefaultLCID
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetEnvironmentStrings
GetLocaleInfoA
IsValidLocale
GetConsoleCP
EnumResourceLanguagesA
DeleteCriticalSection
WriteProfileStringW
FreeEnvironmentStringsA
GetLocaleInfoW
SetEvent
LoadLibraryExA
GetFileType
ExitProcess
GetACP
WriteConsoleW
GetFileAttributesA
HeapReAlloc
HeapSize
WaitForSingleObject
TlsFree
RtlUnwind
GetStartupInfoA
OpenMutexA
GetDiskFreeSpaceExW
GetOEMCP
GetStdHandle
GetDateFormatA
ReadFile
TlsAlloc
MapViewOfFile
FlushFileBuffers
GetSystemTimeAsFileTime
GetModuleHandleW
GetTimeFormatA
GetPrivateProfileIntW
FreeEnvironmentStringsW
HeapDestroy
VirtualFree
CreateMutexA
InitializeCriticalSectionAndSpinCount
HeapFree
LCMapStringW
GetCommandLineA
GetConsoleOutputCP
InterlockedExchange
IsDebuggerPresent
CompareStringA
CloseHandle
UnhandledExceptionFilter
HeapCreate
GetTimeZoneInformation
TerminateProcess
SetFilePointer
VirtualQuery
GetCPInfo
LCMapStringA
TlsGetValue
GetProcAddress
SetStdHandle
GetLastError
MultiByteToWideChar
VirtualAlloc
HeapAlloc
SetHandleCount
SetEnvironmentVariableA
GetCurrentProcess
EnterCriticalSection
WideCharToMultiByte
LoadLibraryA
GetNamedPipeHandleStateA
IsValidCodePage
Sleep
GetModuleFileNameA
GetTickCount
GetEnvironmentStringsW
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
FreeResource
GetNamedPipeHandleStateW
SetUnhandledExceptionFilter
FreeLibrary
SetConsoleCtrlHandler
WriteConsoleA
GetModuleHandleA
EnumSystemLocalesA
SetLastError
Sections
.text Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ