Static task
static1
Behavioral task
behavioral1
Sample
574d5c13ee848c7a6297376de2e06a51.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
574d5c13ee848c7a6297376de2e06a51.exe
Resource
win10v2004-20231222-en
General
-
Target
574d5c13ee848c7a6297376de2e06a51
-
Size
167KB
-
MD5
574d5c13ee848c7a6297376de2e06a51
-
SHA1
653bd92a5a1eda67dc75709a269d8c5bb5f27b50
-
SHA256
a8bb75ecbba5afc35182dde4c163954697f01976329c487ff1b40c9488f687ba
-
SHA512
2e8e0604350a17a62f9966a1046fde064adada2bc37faa39c25e9e4ccf72df1b0c8d5753fbf1118c3dbb54ec543f04c9911a1ebd007cf48c57c4b79918c95fe7
-
SSDEEP
3072:6jQ6rxR9fCFL+TjURbqREOm260eUB54ro+u2A1JCVFdbHow0tiUvJ+/m/LoE2:KQ6NR9fcL2jUYe260eUB2U+YuVFpHoJx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 574d5c13ee848c7a6297376de2e06a51
Files
-
574d5c13ee848c7a6297376de2e06a51.exe windows:4 windows x86 arch:x86
86ccbcdf4f9247ce38ecb2368d813fa5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
GlobalUnlock
InterlockedExchange
GetModuleHandleA
lstrlenA
WaitForSingleObject
GetVersion
CompareFileTime
GetStdHandle
GetCommandLineA
WaitForMultipleObjects
HeapReAlloc
GetProfileIntA
GetSystemDefaultLangID
OpenMutexA
SuspendThread
HeapCreate
GetConsoleCP
VirtualProtect
CloseHandle
GetTickCount
user32
DrawCaption
SetPropA
MessageBoxA
SetScrollInfo
FindWindowA
InvertRect
CreateMenu
GetKeyState
EnableScrollBar
GetCursorInfo
CreateIcon
SetWindowPos
DestroyMenu
CopyImage
IsDialogMessage
InsertMenuA
DispatchMessageA
GetKeyboardLayout
DialogBoxParamA
DragObject
DispatchMessageA
GetDlgItem
CreateCursor
advapi32
RegCloseKey
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ