Static task
static1
Behavioral task
behavioral1
Sample
5a1180ecba01d7feddb5da75ca04c112.exe
Resource
win7-20231215-en
General
-
Target
5a1180ecba01d7feddb5da75ca04c112
-
Size
132KB
-
MD5
5a1180ecba01d7feddb5da75ca04c112
-
SHA1
b0d5b40ca5da74e4d5131166470d9b15031d61e4
-
SHA256
3c3874247af17a1e69899bbd2e71f3791a5d9d53fdabc76cbb1dca15e8048583
-
SHA512
84b6fee78de918b6a2d0e8ef7c0339caabdfff8c90f73f18908aa03b6ca041cac7737846e31af9b904b0793d2aa73bf990f5ad9fcee9fa873b22421ee97dbe26
-
SSDEEP
1536:RojZXPLmxwHOU72o6lr1byvwDIc6+0D5lyMd9oMb3uW4gFsuzCdBxhFapEfz63Lu:SKFQ7eYRcTel7rx4U4dHaqmTi8D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a1180ecba01d7feddb5da75ca04c112
Files
-
5a1180ecba01d7feddb5da75ca04c112.exe windows:4 windows x86 arch:x86
3256cb3690263ac3035efc4780fbdc91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetStartupInfoA
WriteConsoleA
GetFileAttributesW
CreateFileA
ReadConsoleA
SetLocalTime
Sleep
GetModuleFileNameA
VirtualProtect
SetEvent
SetLastError
GetEnvironmentStringsA
CreateSemaphoreW
HeapSize
LoadLibraryA
GetFileSize
CreateDirectoryW
lstrlenA
GetTickCount
OpenSemaphoreA
DeleteFileA
GlobalFree
GetProcessHeap
SetLastError
user32
FindWindowA
DispatchMessageA
CallWindowProcW
DrawTextW
GetClassInfoA
IsWindow
IsZoomed
GetSysColor
DispatchMessageA
SetFocus
DestroyMenu
GetWindowLongA
PeekMessageA
wups
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
advapi32
RegCloseKey
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE