Static task
static1
Behavioral task
behavioral1
Sample
5763cec7c19941668c5fba9e5e2d0a0d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5763cec7c19941668c5fba9e5e2d0a0d.exe
Resource
win10v2004-20231222-en
General
-
Target
5763cec7c19941668c5fba9e5e2d0a0d.bin
-
Size
18KB
-
MD5
5763cec7c19941668c5fba9e5e2d0a0d
-
SHA1
850e7f9e943212014d17ebc642498ae5b20535bb
-
SHA256
6de9d7b48f71304684e885fca5d89fdd829b387a48765731de10f68137d1bcc7
-
SHA512
2aaa29e1214c75c01e773f12df0e2d2943489c7e29d5e2127767bfedf02df58ac72658a61afc7cf32c712dcc17f1b5fd5ece3bfad8f7330f020fc1dc996d680c
-
SSDEEP
192:wugqzmjHIxiRpQ0VR8aj7Lo4u8c3n8ZPWoKx+GgBTBB5L9UuHozX2O:bzmjoS8ERu8c3n4gHgBP58mO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5763cec7c19941668c5fba9e5e2d0a0d.bin
Files
-
5763cec7c19941668c5fba9e5e2d0a0d.bin.exe windows:4 windows x86 arch:x86
20bf720d26e9957ad62daa1e2e6f8b04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrlenA
lstrcatA
CreateFileA
WriteFile
CloseHandle
Sleep
LoadLibraryA
GetFileType
GetModuleHandleA
GetModuleFileNameA
GlobalSize
CopyFileW
FindClose
FindNextFileW
FindFirstFileW
TerminateThread
CreateThread
lstrcpynW
GetSystemInfo
GetModuleHandleW
GetVersionExW
ExpandEnvironmentStringsW
GetTimeFormatW
GetDateFormatW
GetLocalTime
FreeConsole
GetCommandLineA
DeleteFileA
ExitProcess
RtlUnwind
advapi32
SetFileSecurityA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ