Static task
static1
Behavioral task
behavioral1
Sample
5bcd5fba0fb72bb47ccaaedd40fc16b1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bcd5fba0fb72bb47ccaaedd40fc16b1.exe
Resource
win10v2004-20231215-en
General
-
Target
5bcd5fba0fb72bb47ccaaedd40fc16b1
-
Size
628KB
-
MD5
5bcd5fba0fb72bb47ccaaedd40fc16b1
-
SHA1
b6cd91fd0be77c360287de560c9f59790c0a9beb
-
SHA256
c5f8b22d7846db0c90f566bf85ee4aceb5116f307cf8d8ccda6c963d8024c526
-
SHA512
06308022458be0a9b13fdd8139455834cf313990c97cb687d28f36253eae70aeda8b95f3fe4322a5ad24dac823e2f36a390fc4f15eba667c8ec2181a6c2ae2ff
-
SSDEEP
12288:gIvyqElOlwBZwbpIrl9X2hZGZ/Yn/p7kDq6jI3EFXvV8//iR8Ie:g+Eawoe2DWd2WXv6P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bcd5fba0fb72bb47ccaaedd40fc16b1
Files
-
5bcd5fba0fb72bb47ccaaedd40fc16b1.exe windows:4 windows x86 arch:x86
e6fabd0122585f3f30fd0d9d3004bc8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPageA
ImageList_AddMasked
InitCommonControlsEx
wininet
HttpCheckDavCompliance
user32
GetDoubleClickTime
MessageBoxW
GetThreadDesktop
CharNextW
GetMenuItemCount
CreateWindowExA
IsWindowVisible
SetWindowsHookA
DestroyWindow
CreateDialogParamW
InSendMessageEx
ShowWindow
GetMenuDefaultItem
GetClassInfoA
ChangeDisplaySettingsW
MsgWaitForMultipleObjects
DdeUnaccessData
GetWindowWord
RegisterClassA
SetWinEventHook
GetListBoxInfo
DefWindowProcA
DefWindowProcW
GetMenuStringW
RegisterClassExA
IsWindowEnabled
GetKeyState
GetClipboardOwner
kernel32
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
QueryPerformanceCounter
RtlUnwind
GetFileType
GetStartupInfoA
HeapFree
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCurrentThread
SetFilePointer
TlsSetValue
OpenMutexA
GetConsoleOutputCP
EnterCriticalSection
GetPrivateProfileSectionA
GetACP
GetStartupInfoW
GetLastError
GetCurrentProcessId
TerminateProcess
SetStdHandle
GetProcAddress
GetCurrentThreadId
GetCommandLineW
LCMapStringA
InterlockedIncrement
FindClose
GetTimeZoneInformation
GetModuleHandleA
VirtualAlloc
TlsGetValue
SystemTimeToTzSpecificLocalTime
FreeEnvironmentStringsA
Sleep
FindFirstFileA
GetVersionExA
GetDateFormatA
TlsFree
HeapAlloc
GetModuleFileNameA
GetPriorityClass
CompareStringA
SetUnhandledExceptionFilter
MultiByteToWideChar
InterlockedDecrement
FreeLibrary
ReleaseSemaphore
FormatMessageA
IsValidLocale
GetConsoleCP
WriteFile
EnumSystemLocalesA
WriteConsoleW
GetTickCount
FreeEnvironmentStringsW
InterlockedExchange
GetFullPathNameA
RtlMoveMemory
GetCPInfo
GetLocaleInfoW
CloseHandle
GetStringTypeA
ReadFile
WriteConsoleInputA
GetCommandLineA
LCMapStringW
UnhandledExceptionFilter
HeapCreate
CompareStringW
GetStdHandle
GetLocaleInfoA
LoadLibraryA
SetHandleCount
SetEnvironmentVariableA
GetTimeFormatA
SetLastError
GetModuleFileNameW
ExitProcess
GetConsoleMode
GetStringTypeW
EnumResourceTypesA
FindNextChangeNotification
GlobalHandle
GetUserDefaultLCID
HeapSize
GetCurrentProcess
SetConsoleTitleW
DeleteCriticalSection
GetWindowsDirectoryW
VirtualFree
GetProcessHeap
CreateFileA
HeapDestroy
TlsAlloc
LeaveCriticalSection
FlushFileBuffers
GetEnvironmentStringsW
CreateMutexA
VirtualQuery
HeapReAlloc
InitializeCriticalSection
VirtualAllocEx
IsDebuggerPresent
WideCharToMultiByte
GetEnvironmentStrings
WriteConsoleA
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ