Static task
static1
Behavioral task
behavioral1
Sample
57c62a3a15d76e4b37a09cb7a7b85737.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57c62a3a15d76e4b37a09cb7a7b85737.exe
Resource
win10v2004-20231215-en
General
-
Target
57c62a3a15d76e4b37a09cb7a7b85737
-
Size
357KB
-
MD5
57c62a3a15d76e4b37a09cb7a7b85737
-
SHA1
b1483b4b2f764fb7c257bddbb1517ef16d2f2f4a
-
SHA256
bcb3f74a2600e91d9fd02995aeb97e7c9a5795ab1a6efa36d1410e4737c716b5
-
SHA512
30554c4a4bcb3f94c5b0f88fbfe58c281fb8c98c3f2392b2a7a63bb12b430e7402b39408aeb28cb33e9507b8bd310cc7ee564ff30cdb11cf68cada6d23094eec
-
SSDEEP
6144:TNXJz6ZQw9FsL57G2/+C+7VXfhSoSWmTh7dnc4z4Q/IueNfn1g5TzAZl:ZZzQps7G2/j+BX+W8JnX0buehK5/Yl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57c62a3a15d76e4b37a09cb7a7b85737
Files
-
57c62a3a15d76e4b37a09cb7a7b85737.exe windows:4 windows x86 arch:x86
be5862af32f20e1093d44548ea94a2fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
Sleep
InterlockedCompareExchange
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DisableThreadLibraryCalls
LocalFree
LocalAlloc
GetProcAddress
QueryPerformanceCounter
LockResource
MultiByteToWideChar
LoadResource
FindResourceA
lstrlenA
GetWindowsDirectoryA
GetVersionExA
GetCurrentDirectoryW
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryA
GlobalFree
GetEnvironmentVariableA
FindNextFileA
InterlockedIncrement
lstrlenW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
VirtualAlloc
HeapAlloc
GetCPInfo
GetSystemInfo
GetOEMCP
RemoveDirectoryW
DeviceIoControl
GetVersionExW
LoadLibraryW
FindClose
FreeLibrary
SetCurrentDirectoryW
FindFirstFileW
lstrcmpW
SetFileAttributesW
DeleteFileW
FindNextFileW
VirtualProtect
lstrcpynA
GetCommandLineA
GetACP
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
RtlUnwind
GetModuleHandleA
GetStartupInfoA
VirtualQuery
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
user32
CharNextW
CharPrevW
GetClientRect
SendMessageA
DefWindowProcA
SetFocus
GetParent
TranslateMessage
DispatchMessageW
DefWindowProcW
GetDC
CreateWindowExA
advapi32
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegSetValueExW
RegFlushKey
LsaClose
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
gdi32
GetTextExtentPointA
ole32
CoCreateInstance
CreateBindCtx
CoTaskMemFree
rpcrt4
RpcBindingFree
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ