Static task
static1
Behavioral task
behavioral1
Sample
55e748476198bc5b33d67f8966d6869f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55e748476198bc5b33d67f8966d6869f.exe
Resource
win10v2004-20231215-en
General
-
Target
55e748476198bc5b33d67f8966d6869f
-
Size
103KB
-
MD5
55e748476198bc5b33d67f8966d6869f
-
SHA1
daad352dbc153a45c0ad8c04f6adbd0ce90eceb6
-
SHA256
610ae71894b10af3fcb92247a804afbaaae027aa736e9a05f727bd91cb78fbe8
-
SHA512
1ce2e0f852176160e462878b30aa955b0a5ce093cd42d904a16b922883598ed733d5a7ed3a0d485aedb431e31a67b9c145d54c747f77f9c577635e55aa4fa8cf
-
SSDEEP
1536:5oqATsc0CIfmCr5nYv6PmkaPYGWnMs0P8ppj6O5AY6Lge7dUj82R+c1z1U6:iTfdIfmC9YCekaPYMxUnwa82RfJp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55e748476198bc5b33d67f8966d6869f
Files
-
55e748476198bc5b33d67f8966d6869f.exe windows:4 windows x86 arch:x86
d087b93a947e8c047d1d0abbc1ef88be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
GetModuleFileNameA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
GetSystemTime
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
LoadLibraryA
GetProcAddress
GlobalHandle
GetProcessHeaps
GetExitCodeThread
CallNamedPipeA
GenerateConsoleCtrlEvent
PostQueuedCompletionStatus
GlobalCompact
TerminateThread
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetProcessVersion
GetTapePosition
GetModuleHandleA
GetProcAddress
LoadLibraryA
user32
GetKeyboardType
MessageBoxA
CharNextA
ChangeDisplaySettingsExA
DefWindowProcA
OpenIcon
GetNextDlgTabItem
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
msvcr100
_isctype
mfc42u
ord6582
ole32
OleFlushClipboard
gdi32
ord1002
GetTextMetricsW
shlwapi
ord8
rpcrt4
TowerExplode
Sections
CODE Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE