Static task
static1
Behavioral task
behavioral1
Sample
5823c8b592c4413c6b729bbe66e4a233.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5823c8b592c4413c6b729bbe66e4a233.exe
Resource
win10v2004-20231215-en
General
-
Target
5823c8b592c4413c6b729bbe66e4a233
-
Size
330KB
-
MD5
5823c8b592c4413c6b729bbe66e4a233
-
SHA1
88a92ce3dd88ecfe809a978191c2927e32422aca
-
SHA256
52f3de099d5e39764858fedb039ac9a54f41b33e64ee8797e8d5e6986abb5a8e
-
SHA512
ccafb670f93234d5161b85bd0b1ebf64527752dee72445cf4553a8a3e49061d09af1affe65d1829fc454825b6f4a86e0d81f4acdde3d17b618e216449ce01c41
-
SSDEEP
6144:zHjPXfglr6x9ZYnOUgWeI5dlsr4TrcKaD/mvHn0lnduxWsNC2C1j:zHjPXfg56PZYnOUgWfls0TrcKazmfnIz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5823c8b592c4413c6b729bbe66e4a233
Files
-
5823c8b592c4413c6b729bbe66e4a233.exe windows:5 windows x86 arch:x86
7f1b0acb385798ad7155b5539b8aa5f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindow
advapi32
RegEnumValueA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
LookupAccountSidA
GetTokenInformation
OpenProcessToken
ws2_32
WSAStartup
WSACleanup
wininet
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetReadFile
HttpQueryInfoA
netapi32
NetUserGetInfo
NetApiBufferFree
kernel32
RtlUnwind
GetProcessHeap
SetEndOfFile
CompareStringW
CompareStringA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCommandLineA
GetCompressedFileSizeA
CloseHandle
UnlockFile
WriteFile
LockFile
SetFilePointer
ReadFile
CreateFileA
GetLogicalDriveStringsA
CreateMutexA
ExitProcess
OpenMutexA
Sleep
CreateProcessA
CopyFileA
GetModuleFileNameA
GetEnvironmentVariableA
GetShortPathNameA
GetCurrentProcess
MultiByteToWideChar
SetEnvironmentVariableA
CreateThread
SetFileAttributesA
GetLastError
CreateDirectoryA
GetLocalTime
GetVolumeInformationA
GetDriveTypeA
EnterCriticalSection
LeaveCriticalSection
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetSystemTimeAsFileTime
WideCharToMultiByte
DeleteCriticalSection
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
GetProcAddress
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
HeapFree
TerminateProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
SetStdHandle
GetModuleHandleA
GetFullPathNameA
GetCurrentDirectoryA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RaiseException
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapReAlloc
VirtualAlloc
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE