Static task
static1
Behavioral task
behavioral1
Sample
554c2dd739576fdac3b4ee4a42b5850f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
554c2dd739576fdac3b4ee4a42b5850f.exe
Resource
win10v2004-20231215-en
General
-
Target
554c2dd739576fdac3b4ee4a42b5850f
-
Size
89KB
-
MD5
554c2dd739576fdac3b4ee4a42b5850f
-
SHA1
2e602899673abd92e3cb761fdd60f11133be05ac
-
SHA256
ed0a3359e3354016e4b7bc11c4230bd5d49dd8c1bef63121671cd55192a55ebe
-
SHA512
3ddd5bb50f33c98ec02eda449e68228b0d9d0e3e30a3eee59e098a775738d89e4d7a435351a55d42a1b9da4bd1e10e27540be115d26d3b34d5dfa99b5c30d162
-
SSDEEP
1536:os/7QuTjVGpmHnoEu2wOY9EjmegplQ0o00zETMb3zRIxrF5K1ckmEwew2mmpATyM:qu1Gpm+OYPfHQQcfzuxrGck9JhmqATx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 554c2dd739576fdac3b4ee4a42b5850f
Files
-
554c2dd739576fdac3b4ee4a42b5850f.exe windows:4 windows x86 arch:x86
77ec682157a02ef3d7b6e6bfabb6d9fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
SetLastConsoleEventActive
SetCPGlobal
ExpungeConsoleCommandHistoryW
FatalAppExitW
GetProfileIntW
CreateTimerQueue
SetConsoleNlsMode
GetVolumePathNameW
CreateRemoteThread
FindResourceW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 133KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE