Static task
static1
Behavioral task
behavioral1
Sample
5af02004f943097399a33ec379f1c71b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5af02004f943097399a33ec379f1c71b.exe
Resource
win10v2004-20231215-en
General
-
Target
5af02004f943097399a33ec379f1c71b
-
Size
56KB
-
MD5
5af02004f943097399a33ec379f1c71b
-
SHA1
bd7fe66e5bec9a1bf6e04a73a65cb74c78062106
-
SHA256
9f0fe4907fdddf50cfb1dafdf24c90f8b8c9e8982688702034dea133cd255dfb
-
SHA512
0cf8cb80e54c7a363ae95807704b34b5f7d554a988318d9a0eeae2cbce5e054e26f037ed2eb441f1e79208b258d141adf3587217dc39d35c5384faa15647fad1
-
SSDEEP
768:QNRywo5wjZvABgpwumqbZ9Fio89WoY50hzNia7qcSWqMoUNgbo/uCBSwChdr:wywzVQRumWwo8nNieabo/uCVCj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af02004f943097399a33ec379f1c71b
Files
-
5af02004f943097399a33ec379f1c71b.exe windows:4 windows x86 arch:x86
cbbb4147b20973829ce0df77c7df5dd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawStateA
DrawMenuBar
DestroyWindow
DestroyIcon
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateIconFromResourceEx
CreateDialogIndirectParamA
CreateCursor
kernel32
GetStartupInfoA
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
WriteFile
TlsSetValue
TlsGetValue
SetEndOfFile
SetCurrentDirectoryA
RtlUnwind
ExitProcess
ExitThread
FlushFileBuffers
FreeResource
GetLocalTime
GetSystemTime
GetSystemTimeAsFileTime
GetTimeFormatA
ReadFile
Sections
.text Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ