Static task
static1
Behavioral task
behavioral1
Sample
590bc89a5248386c1dd66684d7d23644.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
590bc89a5248386c1dd66684d7d23644.exe
Resource
win10v2004-20231215-en
General
-
Target
590bc89a5248386c1dd66684d7d23644
-
Size
306KB
-
MD5
590bc89a5248386c1dd66684d7d23644
-
SHA1
52e1057d4af7f8b849797a799fa8598476f5159c
-
SHA256
fe39aca7d3b63c1c555c73f047472286227804ccef8aab5f97949f640d4915c7
-
SHA512
76de613162182a02f2e3d6f47d71ed8c7bbaacbc0a7a7d924fa9df1c6f0a6cdd38cdbfce5a836b20546d4ea72d95adc50ca1225ef8b27b3be5d36c27dd0938f3
-
SSDEEP
6144:s5FaExqLclZPQtMNt8CuXYfEN2JTrlZxcZfHeZoqS:caGmyZPQ6fPVfxw+LS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 590bc89a5248386c1dd66684d7d23644
Files
-
590bc89a5248386c1dd66684d7d23644.exe windows:4 windows x86 arch:x86
7be3a5b64b262d1e5234d9562b40dbd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
InterlockedExchange
RtlUnwind
GetLastError
LeaveCriticalSection
TerminateProcess
GetEnvironmentStringsW
GetTimeZoneInformation
GetTimeFormatA
GetStdHandle
GetProcAddress
DeleteCriticalSection
HeapAlloc
ExitProcess
HeapCreate
GetDiskFreeSpaceW
GetCommandLineA
LCMapStringA
GetCurrentThread
GetCurrentThreadId
GetSystemInfo
EnumSystemLocalesA
LCMapStringW
OpenMutexA
MultiByteToWideChar
WriteFile
FlushFileBuffers
GetNamedPipeHandleStateA
UnhandledExceptionFilter
HeapFree
QueryPerformanceCounter
WideCharToMultiByte
IsValidLocale
GetLocaleInfoA
TlsGetValue
GetTickCount
GetACP
GetOEMCP
GetModuleFileNameA
EnterCriticalSection
GetSystemTimeAsFileTime
ReadFile
HeapReAlloc
LoadLibraryA
GetStringTypeW
GetModuleHandleA
SetStdHandle
GetStartupInfoA
GetFileType
GetEnvironmentStrings
IsBadWritePtr
GetUserDefaultLCID
CompareStringW
CreateMutexA
VirtualQuery
IsValidCodePage
SetLastError
GetLocaleInfoW
SetHandleCount
HeapDestroy
CloseHandle
GetDateFormatA
VirtualFree
GetStringTypeA
SetFilePointer
TlsSetValue
GetCurrentProcessId
GetVersionExA
TlsFree
GetCurrentProcess
GetCPInfo
SetEnvironmentVariableA
CompareStringA
VirtualAlloc
TlsAlloc
VirtualProtect
HeapSize
FreeEnvironmentStringsW
FreeEnvironmentStringsA
comctl32
InitCommonControlsEx
user32
RegisterClassA
SetThreadDesktop
SetWinEventHook
DestroyCursor
RegisterClassExA
IsWindowVisible
Sections
.text Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ