Static task
static1
Behavioral task
behavioral1
Sample
5a3423617c0911e02cad7168e418f2cb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5a3423617c0911e02cad7168e418f2cb.exe
Resource
win10v2004-20231215-en
General
-
Target
5a3423617c0911e02cad7168e418f2cb
-
Size
43KB
-
MD5
5a3423617c0911e02cad7168e418f2cb
-
SHA1
2517bd430198b6fda6889c62a7286dd49775b121
-
SHA256
9f1cece83058b44e05a727351fa0d5064bb0217e86b3a01fed25c5d060c19667
-
SHA512
f60f196f965025ed9894237aa7184d834a0bea8a830c482d259721ed93e738b4383a7b3ba7fca07b55e1e8cdae4daf2f349d1f9a3f719534546fd6cd369bba7d
-
SSDEEP
768:SW4wcs+o2YyZyuiwthXlWjFQfrj4cy9ecAq2BtORZ3VNmynJFRANJWAE8I:SW48+o2YyZN5LlWje34BEceBtI6ynnAH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a3423617c0911e02cad7168e418f2cb
Files
-
5a3423617c0911e02cad7168e418f2cb.exe windows:4 windows x86 arch:x86
a90bee0c6060702633a331a218e3a9ad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
urlmon
URLDownloadToFileW
Sections
CODE Size: 35KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE