Static task
static1
Behavioral task
behavioral1
Sample
5bebc27d3f01693f84851b07591bbfa7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5bebc27d3f01693f84851b07591bbfa7.exe
Resource
win10v2004-20231222-en
General
-
Target
5bebc27d3f01693f84851b07591bbfa7
-
Size
1.5MB
-
MD5
5bebc27d3f01693f84851b07591bbfa7
-
SHA1
1e31d30c64147e8385b913fe53899ed35a3f0fd4
-
SHA256
21fffcc4d1db45ed2362be06f4abbdfa33ed59a19d353b4fcc523452c6798286
-
SHA512
ab9353aba988b0980b75aa4cc9e374aa93c723a9a60bcdad7bb51d0bf7dbb29c5e58951a29a6de31c8c4b3c5278549429bb62e121bed7b2fd8b67f9c1b3cf626
-
SSDEEP
24576:KNaWI/nQmzJ3gg9Bc97+i+P/gyR4cPWnYIyJ515228VX873Qw8gi7+zRQERXSoWd:EAr7Ba7nU/ucunYIE142Qw3QwF16
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bebc27d3f01693f84851b07591bbfa7
Files
-
5bebc27d3f01693f84851b07591bbfa7.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 214KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ocynglgl Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qryzlvkm Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE