Static task
static1
Behavioral task
behavioral1
Sample
5ad82b22ac424f81c93fbe0f9935520c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5ad82b22ac424f81c93fbe0f9935520c.exe
Resource
win10v2004-20231215-en
General
-
Target
5ad82b22ac424f81c93fbe0f9935520c
-
Size
83KB
-
MD5
5ad82b22ac424f81c93fbe0f9935520c
-
SHA1
6220a651b6049b3a17d1c4e700f268396bbdf49a
-
SHA256
b031a46dc8e43378c833dd6a5be8f46fb6e60a81964c645903c0127a1ab2fe67
-
SHA512
e17237bf98a19913cd191c918564a5587113f96c79bc6411dff1c27b4eb2e51668ff24178d6ed67850d0fdb98e9fa67828003dd96b28faf8da5a1e2d9be30c17
-
SSDEEP
1536:94vxw7n382D1kbH5HRb9KsUiWFll91oyWjEErxTWDTMqhGKYIZTET8bDQ:94ps8EkD5niznoyWjBkMqhGKZTbbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ad82b22ac424f81c93fbe0f9935520c
Files
-
5ad82b22ac424f81c93fbe0f9935520c.exe windows:4 windows x86 arch:x86
fe6805bc1c7323d8e4d165ffc5856f06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNamedPipeHandleStateW
SetCommTimeouts
GetCommandLineW
NlsConvertIntegerToString
ReadFile
GetVolumeNameForVolumeMountPointA
_lread
GetCurrentThread
VirtualLock
GetProcessShutdownParameters
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE