Static task
static1
Behavioral task
behavioral1
Sample
5981984a9abce317a2dd265ad2cca729.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5981984a9abce317a2dd265ad2cca729.exe
Resource
win10v2004-20231215-en
General
-
Target
5981984a9abce317a2dd265ad2cca729
-
Size
763KB
-
MD5
5981984a9abce317a2dd265ad2cca729
-
SHA1
d3a4d5e73ec42ce688a1b58fa23a83971df73ba6
-
SHA256
3fb50fb81e76d693a7192863a27b6f4aa6c210f6da9fe50f8ce3925208d66ff3
-
SHA512
59640d0f42b13f79186d285c868b5a15a9f2cd4f3724b2e9d91b83eb813fd9cc8c4de886259d2519f38fe392e02206285cd78f96b4d6c9131c610c8a6426a008
-
SSDEEP
12288:vw06vudAzSy3xMkYD64mkLKxjnSpb39zRO01O5bN+d6gMgCXcY4psa4fG0wZI4qx:v168AOy3xMk+RdKVwb3N3C4s3BwO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5981984a9abce317a2dd265ad2cca729
Files
-
5981984a9abce317a2dd265ad2cca729.exe windows:4 windows x86 arch:x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 716KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE