_PostQuitMessagePostQuitMessagePostQuitMessagePostQuitMessage@0
Static task
static1
Behavioral task
behavioral1
Sample
5680f4deb917ea1435a567173ad17a2c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5680f4deb917ea1435a567173ad17a2c.exe
Resource
win10v2004-20231222-en
General
-
Target
5680f4deb917ea1435a567173ad17a2c
-
Size
197KB
-
MD5
5680f4deb917ea1435a567173ad17a2c
-
SHA1
7aeea14ba464b3df65852e347bd5f9c7d58b223f
-
SHA256
4fec5a083b70a13aa1423c28fd94733866fd1ae10e0e8829402d6c691a9275b5
-
SHA512
faffa0fd3c21a23ea0ecc331022c0fc78612e73bda14f2b4f191b38cd0f57a0691027c3dc363370af665c5b8cd76be0f21e00491307ce6b41462bb67b7d9d3c0
-
SSDEEP
6144:vaTeZWlowZLlr8Gi+UoMxwtpE+JCy88Sn:T92d5tUoMxwtuv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5680f4deb917ea1435a567173ad17a2c
Files
-
5680f4deb917ea1435a567173ad17a2c.exe windows:5 windows x86 arch:x86
c45b0e0da73cac0e5ead5e0dbfa9de50
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleBuildVersion
kernel32
FreeLibrary
SetLocalTime
GetHandleInformation
GetLongPathNameW
lstrlenW
SetThreadLocale
SetSystemTime
shlwapi
PathFindExtensionA
msvcrt
floor
isxdigit
isalpha
strspn
user32
CascadeWindows
AllowSetForegroundWindow
DialogBoxParamW
GetWindowLongA
GetDlgItemInt
SystemParametersInfoW
OemToCharA
GetClassLongW
DialogBoxIndirectParamA
MapVirtualKeyExW
SendMessageTimeoutW
Exports
Exports
Sections
.fgfhgf Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vbbv Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rere Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rtrety Size: 512B - Virtual size: 414B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ