Static task
static1
Behavioral task
behavioral1
Sample
5652cbb365a4422be6f0fb939c6d7567.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5652cbb365a4422be6f0fb939c6d7567.exe
Resource
win10v2004-20231222-en
General
-
Target
5652cbb365a4422be6f0fb939c6d7567
-
Size
22KB
-
MD5
5652cbb365a4422be6f0fb939c6d7567
-
SHA1
1a4132bfae5d6b001ac77af4874214e990add82a
-
SHA256
540d046fef2cbc5f5319c82c66e1cde8a02fc2c4c84862317702eba750deda36
-
SHA512
7cf9264de11ecd1b079acd58b2ceb7995a7e2b2aa68841de8fc42fe1d6d23626a9aedf03af77e6bd3f9691eccac7244a8c8f22977c010ddec4e4bf8eb4c0358b
-
SSDEEP
384:eO5ZooJIG/wBMZMzo1W3lQQyWrF/usKXFMUEF1t0863tfgskyqmQJJcokH:T5ZPJzoyZMzd3lQQykFuX6Uc0ltFk75U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5652cbb365a4422be6f0fb939c6d7567
Files
-
5652cbb365a4422be6f0fb939c6d7567.exe windows:4 windows x86 arch:x86
3a2f0a00494382fbbd510d7cb8c4000b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAEventSelect
kernel32
VirtualQueryEx
user32
GetInputState
Sections
.text Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ