Static task
static1
Behavioral task
behavioral1
Sample
5dcb5a89f17b6e40ce36381e31916c1758dc541b0567e1f719df8162740e1d10.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5dcb5a89f17b6e40ce36381e31916c1758dc541b0567e1f719df8162740e1d10.exe
Resource
win10v2004-20231222-en
General
-
Target
5dcb5a89f17b6e40ce36381e31916c1758dc541b0567e1f719df8162740e1d10
-
Size
437KB
-
MD5
1975860bbb0b5185d9a8393ea72ee1bb
-
SHA1
a7340fb6dd790622e32a20c24067dca09618dd35
-
SHA256
5dcb5a89f17b6e40ce36381e31916c1758dc541b0567e1f719df8162740e1d10
-
SHA512
a2db726055f75a2b7bd9a3659787ae7cd40999bee6fd4d3901436df81c59c24f3dfb23cebd9fad5ac429bc36345e8cdfb2022b33887ed946b4348e3b0bfc0312
-
SSDEEP
12288:dV4FK1XKIA+PFpHraQ4g9tCNqdsxwENvciA6VbG:dMKXpHHuZg90WOwENvciA+bG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dcb5a89f17b6e40ce36381e31916c1758dc541b0567e1f719df8162740e1d10
Files
-
5dcb5a89f17b6e40ce36381e31916c1758dc541b0567e1f719df8162740e1d10.exe windows:4 windows x86 arch:x86
0e8a668bdc32a522ef1160989b3e99ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
user32
SetTimer
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: 429KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE