Static task
static1
Behavioral task
behavioral1
Sample
57573b8fb1e224a406978dcb9305385b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57573b8fb1e224a406978dcb9305385b.exe
Resource
win10v2004-20231215-en
General
-
Target
57573b8fb1e224a406978dcb9305385b
-
Size
44KB
-
MD5
57573b8fb1e224a406978dcb9305385b
-
SHA1
debc37f26ae81fbbf4b47542be3be1b62b02ea8b
-
SHA256
737d4405db316e4e7cffd7bd6e7cf9ebd31ff78e580400c71e47609155e7d442
-
SHA512
42da5e5b26cffcc69477065805443b1d1fd0a99dc071125051b0b149206454568578d85eb1bcf671dc809abc71f2d956581dd4bd79c15d2e6d3717eae43d47a4
-
SSDEEP
768:W+VUUbqSbIBTh7/hiVWh6EY/4Ccm+L+HFvuqzFZUWbISrEy9am8Dpy74:W+gSUBThzd6EY/nvbRuqhuWbIGt8Ltys
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57573b8fb1e224a406978dcb9305385b
Files
-
57573b8fb1e224a406978dcb9305385b.exe windows:4 windows x86 arch:x86
294011cbe4cf2bee89a34f0afa2b4f9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
WaitForSingleObjectEx
GetStringTypeExA
DisconnectNamedPipe
TryEnterCriticalSection
EnumSystemLocalesA
SetEndOfFile
BeginUpdateResourceA
GetCurrentProcess
SetCommMask
WriteFile
WriteConsoleInputVDMA
GetDiskFreeSpaceExW
SetConsoleIcon
SetLocaleInfoA
CreateMutexW
EnumResourceTypesA
RegisterConsoleOS2
OpenFileMappingA
FormatMessageA
Heap32ListNext
WaitForDebugEvent
GetPrivateProfileSectionNamesW
SetTimerQueueTimer
ExitProcess
GetThreadPriority
EnumDateFormatsExW
GetPrivateProfileStringW
Heap32Next
FindFirstVolumeMountPointA
Sleep
user32
HideCaret
LoadRemoteFonts
GetWindowInfo
LookupIconIdFromDirectoryEx
NotifyWinEvent
DefDlgProcW
ToUnicodeEx
CreateDialogParamW
CreateWindowExA
DlgDirSelectExA
OffsetRect
CopyAcceleratorTableW
BeginPaint
CharNextW
GetKeyboardLayoutNameA
SetForegroundWindow
DlgDirSelectExW
MessageBoxExW
EndTask
EnumWindows
GetAppCompatFlags
FindWindowA
SetClassWord
GetClassLongA
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE