Static task
static1
Behavioral task
behavioral1
Sample
57628bd4b03cdc9077aa84f14e666692.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57628bd4b03cdc9077aa84f14e666692.exe
Resource
win10v2004-20231215-en
General
-
Target
57628bd4b03cdc9077aa84f14e666692
-
Size
3.4MB
-
MD5
57628bd4b03cdc9077aa84f14e666692
-
SHA1
c663a59f148141a7c67ea57dbb6d38892a53ea7c
-
SHA256
9def32e5ab958f991d8a04b1dd9d094c3969dad264b8d4e60f0a0422712ef68e
-
SHA512
c62a6f2176999f1e82cc320038d105a15a2bcfaa13b294849cea71c32bf8227c828478c2d3b3c9a40e61ab220466f8237b8c2655507573bc7899c322111350f4
-
SSDEEP
98304:H8p7eYDOlsIH60wwp2lkCOHv7uYeESYcj2:H81eTXp2lQKj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57628bd4b03cdc9077aa84f14e666692
Files
-
57628bd4b03cdc9077aa84f14e666692.exe windows:4 windows x86 arch:x86
8792c07a600fa4bde5545ab05a4c0615
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
SetUnhandledExceptionFilter
CloseHandle
TerminateProcess
Sleep
GetTickCount
FreeLibrary
MultiByteToWideChar
HeapFree
LocalFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetProcessHeap
ExitProcess
GetStdHandle
GetCommandLineW
GetACP
FormatMessageW
GetFileType
GetConsoleMode
FlushFileBuffers
TlsSetValue
CreateEventW
HeapSetInformation
LoadLibraryExW
CreateThread
GetCPInfo
GetStringTypeW
RtlUnwind
LCMapStringW
InitializeCriticalSectionAndSpinCount
FindNextFileW
IsValidCodePage
LocalAlloc
GetVersionExW
OutputDebugStringW
GetFileSize
VirtualFree
LoadLibraryA
GetModuleHandleExW
GetLocaleInfoW
GetFullPathNameW
LoadResource
UnmapViewOfFile
GetExitCodeProcess
CreateProcessW
user32
TranslateMessage
DispatchMessageW
DestroyWindow
ReleaseDC
SetWindowLongW
GetWindowLongW
GetDlgItem
GetDC
SetWindowPos
IsWindow
LoadCursorW
GetParent
SetWindowTextW
SetTimer
LoadIconW
SetFocus
SetForegroundWindow
GetSysColor
PeekMessageW
EndPaint
InvalidateRect
EnableMenuItem
GetWindow
SystemParametersInfoW
MessageBoxA
Sections
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ