Static task
static1
Behavioral task
behavioral1
Sample
58f51cc789de4f1f9b85e18b817b9c62.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
58f51cc789de4f1f9b85e18b817b9c62.exe
Resource
win10v2004-20231222-en
General
-
Target
58f51cc789de4f1f9b85e18b817b9c62
-
Size
118KB
-
MD5
58f51cc789de4f1f9b85e18b817b9c62
-
SHA1
a411124cefbcf68cd9e70fda234993fe2814c19d
-
SHA256
65be2bfc5beeef5db9439df1fc7eacf28456cc006645665d6b004cef5390f51b
-
SHA512
5289ac93827d4513f0b13b94a84ce0569aae02810403b4f00e15382da5fc9753fec4b70a933a6bea9072d844d35d029de185a3b4169f4a60defa20ed0069aa3e
-
SSDEEP
3072:aVyR4dZgqnF3chyXVZ1VqdhHyplQXyT3OTNsi:aVg4bvz1PT+Jsi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58f51cc789de4f1f9b85e18b817b9c62
Files
-
58f51cc789de4f1f9b85e18b817b9c62.exe windows:4 windows x86 arch:x86
1890fa6d4baed08ead4c2daf6edeb991
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetLastError
lstrcatA
FindNextFileA
FindFirstFileA
GlobalFree
CloseHandle
WriteFile
CreateFileA
FreeLibrary
GlobalReAlloc
GetCurrentDirectoryA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetWindowsDirectoryA
WaitForSingleObject
lstrcpyA
lstrcpynA
LocalFree
WideCharToMultiByte
MultiByteToWideChar
CreateDirectoryA
RemoveDirectoryA
SetFileAttributesA
GetFileAttributesA
GlobalAlloc
SetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA
SetFileTime
DosDateTimeToFileTime
SystemTimeToFileTime
GetCurrentProcess
DuplicateHandle
GetFileType
SetFilePointer
InterlockedIncrement
ReadFile
CreateMutexA
GetLastError
lstrlenA
GetVolumeInformationA
GetSystemDefaultLCID
GetLocaleInfoA
InterlockedDecrement
FindClose
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
mfc42
msvcp60
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
msvcrt
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
_mbsstr
gmtime
strcmp
calloc
_mbscmp
strstr
strncpy
atol
time
atoi
_strnicmp
_strdup
_mbsupr
_XcptFilter
memcpy
fopen
malloc
fread
fclose
sprintf
memset
_mbsnbcpy
__CxxFrameHandler
_CxxThrowException
free
ftell
fseek
toupper
strlen
strcpy
wcslen
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
strcat
_controlfp
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
shell32
SHFileOperationA
user32
EqualRect
CopyRect
wsprintfA
CharUpperA
Sections
oihx Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE