?SDOisioKJS@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
5944b2cfdd042d61dd5f1a1785b57bf5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5944b2cfdd042d61dd5f1a1785b57bf5.exe
Resource
win10v2004-20231215-en
General
-
Target
5944b2cfdd042d61dd5f1a1785b57bf5
-
Size
221KB
-
MD5
5944b2cfdd042d61dd5f1a1785b57bf5
-
SHA1
6e83e1e861b04f01e51e0f40d07ba9fd42844ee4
-
SHA256
d01eac145650172c2d3eb7d5b326291e0bc2fac63b59d82d589b027a128fd6e3
-
SHA512
090ecbf33217d86884d81af392b9920c71bf186c5a2eda8c63085fe9d47380f7e89bce79d92149b5a25c016a59c039379ad16f155410056d2111516b63e44d1f
-
SSDEEP
6144:972DeJ7MMuqM7GjIU+OJ3aua35rCiRBFMqiIFtD0xfdir:QYuhiI77ciBd6xfd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5944b2cfdd042d61dd5f1a1785b57bf5
Files
-
5944b2cfdd042d61dd5f1a1785b57bf5.exe windows:5 windows x86 arch:x86
6ec2c195864c494b16bf735cbc3fccbe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleIsRunning
kernel32
ReadFile
LocalFree
lstrcpyW
GetShortPathNameW
GetAtomNameW
GlobalMemoryStatus
GetModuleHandleW
IsValidLocale
GetComputerNameW
SetFileAttributesW
SetWaitableTimer
SetFileApisToOEM
lstrcmpiW
lstrcmpA
LocalReAlloc
SetPriorityClass
HeapValidate
user32
CreateDialogParamA
OemToCharBuffA
EqualRect
LoadIconW
SetCursorPos
IsCharUpperA
LoadIconA
SendDlgItemMessageA
GetDialogBaseUnits
GetAltTabInfoW
PostMessageW
MapVirtualKeyW
CharNextA
MoveWindow
InvalidateRgn
GetSysColor
IsWindowVisible
GetFocus
GetMessageTime
MapWindowPoints
GetMessageA
ShowScrollBar
CreateCursor
LookupIconIdFromDirectory
GetDC
DestroyCaret
GetNextDlgTabItem
SetSysColors
IsWindowUnicode
CreateDialogIndirectParamW
ScrollWindow
RemoveMenu
CreatePopupMenu
DrawStateW
TabbedTextOutW
GetMenuItemCount
PostThreadMessageW
DialogBoxIndirectParamA
msvcrt
memcpy
comctl32
InitCommonControlsEx
CreatePropertySheetPageA
ImageList_Draw
CreateToolbarEx
gdi32
EndDoc
EnumFontFamiliesExW
GetStockObject
PolyBezier
GetTextExtentPointW
BeginPath
RoundRect
GetWindowOrgEx
Rectangle
Ellipse
GetObjectA
LPtoDP
SetViewportOrgEx
DeleteDC
SetBitmapDimensionEx
SetBrushOrgEx
comdlg32
ChooseColorW
ReplaceTextW
GetOpenFileNameA
GetOpenFileNameW
PrintDlgW
version
VerQueryValueW
Exports
Exports
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dat_0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_1 Size: 512B - Virtual size: 283B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_2 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_3 Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_4 Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug Size: 512B - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ