Static task
static1
Behavioral task
behavioral1
Sample
58cec3fcef2440fd7a6aed02c223273b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
58cec3fcef2440fd7a6aed02c223273b.exe
Resource
win10v2004-20231215-en
General
-
Target
58cec3fcef2440fd7a6aed02c223273b
-
Size
56KB
-
MD5
58cec3fcef2440fd7a6aed02c223273b
-
SHA1
f907a1f30d9d5dea577643d17adf5ef8541bf3ca
-
SHA256
006a7f0ecb42f0754acc298e2238cfe1384aa347766ad859e3b52d70bc0e0126
-
SHA512
5c5afc9405952c5a923f3a40a54ad6585a7f5cce823934cc8d5d403df386986b7a9b2cfa00c4328ca72ba4cd073188decbdfcde61f0f402029e0059614ad7b08
-
SSDEEP
768:uzAbfOokh9bCSUand2KuPeDBP3jpSLtqGFZKQ9AIg0YfK:uGGD9bCTand2KPmUGrjOjfK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58cec3fcef2440fd7a6aed02c223273b
Files
-
58cec3fcef2440fd7a6aed02c223273b.exe windows:4 windows x86 arch:x86
a023afc8e7658ff37260b2a7a9eb9f1a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
StringFromGUID2
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
oleaut32
LoadRegTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
UnRegisterTypeLi
SysStringLen
VarUI4FromStr
LoadTypeLi
user32
CharNextW
kernel32
HeapFree
UnhandledExceptionFilter
LCMapStringA
GetOEMCP
SetUnhandledExceptionFilter
OpenEventW
GetFileType
LeaveCriticalSection
VerSetConditionMask
SetThreadLocale
TlsGetValue
TlsAlloc
EnterCriticalSection
GetModuleHandleW
GetConsoleMode
SizeofResource
GetProcessHeap
GetModuleHandleA
CreateThread
IsDebuggerPresent
GetThreadLocale
FindResourceW
GetSystemInfo
LocalAlloc
lstrlenW
IsValidCodePage
OutputDebugStringW
FindResourceExW
HeapAlloc
TryEnterCriticalSection
GetCurrentThreadId
WriteFile
TlsSetValue
RaiseException
GetCommandLineA
GetConsoleCP
lstrcmpiW
CreateEventW
DeleteCriticalSection
VirtualAlloc
GetFileSize
WaitForMultipleObjects
SetLastError
HeapDestroy
VirtualFree
FreeEnvironmentStringsA
VerifyVersionInfoW
HeapSize
LCMapStringW
WriteConsoleA
SetStdHandle
CreateFileW
GetSystemDirectoryW
SetFilePointer
GetConsoleOutputCP
FlushFileBuffers
LockResource
GetStdHandle
CloseHandle
FreeEnvironmentStringsW
CreateFileA
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
SetHandleCount
TlsFree
HeapReAlloc
RtlUnwind
LoadResource
GetSystemTimeAsFileTime
ReadFile
LoadLibraryExW
WriteConsoleW
WaitForSingleObject
GetACP
FreeLibrary
LoadLibraryW
VirtualAllocEx
urlmon
CoInternetParseUrl
hlink
HlinkCreateBrowseContext
HlinkQueryCreateFromData
HlinkCreateShortcutFromMoniker
HlinkResolveShortcutToString
cmcfg32
CMConfig
CmstpExtensionProc
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ikbeK Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aiNix Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SVvky Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dgSw Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.GLls Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BxPDNq Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdkOnx Size: 512B - Virtual size: 403B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ