Static task
static1
Behavioral task
behavioral1
Sample
5b841b66bf2fe3032016cc24d22ba58b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b841b66bf2fe3032016cc24d22ba58b.exe
Resource
win10v2004-20231222-en
General
-
Target
5b841b66bf2fe3032016cc24d22ba58b
-
Size
280KB
-
MD5
5b841b66bf2fe3032016cc24d22ba58b
-
SHA1
3650f099e5e547391a8ca42be1e14aca25e21cec
-
SHA256
7b991127f3a5f1b0b45b44666bb95aca6ba81b71e01096c7a6ccc8b3690cdabf
-
SHA512
87598ebcc5345cf586d424f68afaf4df138be7f0e4c59a6dc9a1e73469c0a672170361b3d45933ab00d53f986886dbe9839a7160b8c363693c33cb694bac000f
-
SSDEEP
6144:E60svyW/9vGo0CyTIID7/GrYbB2Y99nIpZME:D0svy09v0mQB2WncZM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b841b66bf2fe3032016cc24d22ba58b
Files
-
5b841b66bf2fe3032016cc24d22ba58b.exe windows:4 windows x86 arch:x86
a2936402999bf6956f39a94e09fefa14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GetStartupInfoA
MapViewOfFileEx
GetWindowsDirectoryW
GetEnvironmentStringsW
GetFileType
HeapAlloc
TlsSetValue
SetEnvironmentVariableA
IsDebuggerPresent
SetUnhandledExceptionFilter
GetThreadPriorityBoost
GetCompressedFileSizeA
DeleteCriticalSection
MultiByteToWideChar
SetConsoleCtrlHandler
CompareStringA
GetLocaleInfoW
GetOEMCP
GetMailslotInfo
LCMapStringW
FreeEnvironmentStringsW
GetProcessHeap
FreeLibrary
GetLogicalDriveStringsA
GetStringTypeW
SetLastError
GetLocaleInfoA
GetProcAddress
GlobalAddAtomW
GetLastError
TlsFree
DosDateTimeToFileTime
FreeEnvironmentStringsA
UnlockFile
GetTimeFormatA
VirtualQuery
InterlockedIncrement
TlsAlloc
IsValidLocale
CompareStringW
GetUserDefaultLCID
SetHandleCount
GetEnvironmentStrings
HeapReAlloc
InterlockedDecrement
ExitProcess
FreeResource
lstrlenW
VirtualAlloc
TlsGetValue
QueryPerformanceCounter
GetCurrentProcess
HeapDestroy
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapCreate
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
EnumSystemLocalesA
GetCurrentThread
GetCurrentProcessId
GetModuleFileNameA
HeapSize
EnterCriticalSection
CopyFileExA
GetTickCount
GetStringTypeA
ConnectNamedPipe
GetCPInfo
LeaveCriticalSection
IsValidCodePage
RtlUnwind
GetACP
GetSystemTimeAsFileTime
InterlockedExchange
InitializeCriticalSection
LockFile
WriteConsoleOutputW
GetDateFormatA
WriteFile
GetStdHandle
GetTimeZoneInformation
HeapFree
TerminateProcess
LoadLibraryA
VirtualFree
Sleep
UnhandledExceptionFilter
user32
SetCursorPos
GetWindowModuleFileNameW
DrawIcon
GetWindowTextA
GetUserObjectInformationW
SendInput
EnumDisplaySettingsW
GetTitleBarInfo
DdeGetLastError
ChangeMenuW
GetWindowRgn
CharPrevW
IsDialogMessageW
CreateDesktopA
DestroyAcceleratorTable
CharLowerBuffW
EnumDisplayDevicesA
LoadStringA
MapVirtualKeyA
OpenDesktopA
GetUpdateRgn
DragDetect
shell32
DragAcceptFiles
SHGetFileInfo
SHGetDesktopFolder
InternalExtractIconListA
SHFreeNameMappings
SHGetPathFromIDList
SHGetSpecialFolderLocation
FindExecutableA
DoEnvironmentSubstW
SHGetFileInfoW
ShellAboutW
gdi32
CreateCompatibleDC
CreateBitmapIndirect
GetViewportExtEx
CreateBrushIndirect
SetRectRgn
GetRgnBox
ExcludeClipRect
DeleteDC
DeleteEnhMetaFile
CreateEnhMetaFileW
GetCharABCWidthsW
DeleteObject
ExtFloodFill
ChoosePixelFormat
AddFontResourceW
GetColorAdjustment
GetEnhMetaFileA
PlayMetaFile
Sections
.text Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ