Static task
static1
Behavioral task
behavioral1
Sample
5968cd30807d2c4f1ddd66fbdf794710.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5968cd30807d2c4f1ddd66fbdf794710.exe
Resource
win10v2004-20231222-en
General
-
Target
5968cd30807d2c4f1ddd66fbdf794710
-
Size
22KB
-
MD5
5968cd30807d2c4f1ddd66fbdf794710
-
SHA1
8dede95e0a4b7638286f691ce1dee4259dbeeb96
-
SHA256
5ae6514462f79d047d3614225a44020c9d284aaa4a8f479d40233b129bac4518
-
SHA512
3be1d76d8dc0374e43074d2891a484fb5b92c5284965f8b6c7e30aefe9221b653d27bb75a582a3ea5481c9b76bb15f3a1d23cd78259cf97879c326abae1e2e89
-
SSDEEP
384:b0+rShXBJYZXQ/xOfdw7UGxNNfuwUFkPu58JeZhxi2i8t0Eh131UKF1gMx:Y0SqXQ/xOfdGUQNsFdyeM2iD2lF1gMx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5968cd30807d2c4f1ddd66fbdf794710
Files
-
5968cd30807d2c4f1ddd66fbdf794710.exe windows:4 windows x86 arch:x86
7c1da752b8363cb9d638145c6f64b084
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
CreateFiber
DeleteAtom
EnumCalendarInfoA
DosDateTimeToFileTime
comctl32
DllInstall
InitCommonControlsEx
ImageList_SetOverlayImage
ImageList_Read
ImageList_GetBkColor
urlmon
MkParseDisplayNameEx
WriteHitLogging
URLDownloadA
SetSoftwareUpdateAdvertisementState
Sections
.text Size: 15KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE