Static task
static1
Behavioral task
behavioral1
Sample
5a7f8d489e3d5ab59309ddce96bc2058.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a7f8d489e3d5ab59309ddce96bc2058.exe
Resource
win10v2004-20231215-en
General
-
Target
5a7f8d489e3d5ab59309ddce96bc2058
-
Size
303KB
-
MD5
5a7f8d489e3d5ab59309ddce96bc2058
-
SHA1
6b8bc2ea72c52cb6b185415baa21f46d221c2cd0
-
SHA256
4149cd7cf820f63870dfebb14c5a36475f0b89568a5cff494ffa89f0aa6541b7
-
SHA512
8badde28653f9a4f35f1fd5244b7a4cb985f79d4343abd0a9297b7ac124dc333c00ff17b2e58eafa9492a87d9d9ae5346e975ebe3cab196a0c3eb3faf20ab10a
-
SSDEEP
6144:LvmSiwGLljWHEY2MYHGP0Eo0VZ4zytbLB:Lv8wGpYrMGj4zkN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a7f8d489e3d5ab59309ddce96bc2058
Files
-
5a7f8d489e3d5ab59309ddce96bc2058.exe windows:5 windows x86 arch:x86
0b75a3a2841c064c3f69e53bc2abef17
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileSize
MapViewOfFile
UnmapViewOfFile
HeapAlloc
GetCurrentProcess
HeapFree
GetProcessHeap
IsBadReadPtr
ReadProcessMemory
CreateProcessA
FlushInstructionCache
CreateDirectoryA
SetCurrentDirectoryA
GetStdHandle
GetProcAddress
VirtualProtectEx
VirtualAllocEx
GetPrivateProfileStringA
GetFullPathNameA
CreateFileMappingA
WritePrivateProfileStringA
GetCurrentDirectoryA
CloseHandle
WriteProcessMemory
GetSystemInfo
SetEndOfFile
CreateFileW
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
ResumeThread
LoadLibraryA
TerminateThread
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
GetFileType
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
SetHandleCount
WriteFile
GetModuleFileNameA
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleA
user32
MessageBoxA
SetWindowTextA
FindWindowA
GetDlgItem
DispatchMessageA
GetMessageA
CreateDialogParamA
PostQuitMessage
SetForegroundWindow
SendMessageA
IsDialogMessageA
TranslateMessage
comdlg32
GetOpenFileNameA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ws2_32
WSAStartup
WSACleanup
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ