Static task
static1
Behavioral task
behavioral1
Sample
5bf9f32af126272e27c2433842f13169.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bf9f32af126272e27c2433842f13169.exe
Resource
win10v2004-20231215-en
General
-
Target
5bf9f32af126272e27c2433842f13169
-
Size
10KB
-
MD5
5bf9f32af126272e27c2433842f13169
-
SHA1
cf771ae8afd82f343f9928eb326562aa9e939918
-
SHA256
33eaba5d93b81352f535a40f268341ca63b0820a468d27270a301a3c84fa7001
-
SHA512
294e8e512bbfce7a89090fc15b061ca4fb96d951074ccd77a05f67323f4573aadb36fb8d75baa969e17e21a2c7f6ab8b17ddb83ca1a9ae308208c3ec37fd08df
-
SSDEEP
192:m3mN4efLt9BlabGZcojGtNK6QsJDhaWP+BIXFuS0fxeP3TmBB:m26QL36XojsNK6QsJDvLudfxuqBB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bf9f32af126272e27c2433842f13169
Files
-
5bf9f32af126272e27c2433842f13169.exe windows:4 windows x86 arch:x86
3f9fb66c4515665b0ab7d2ef9f87b099
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyIcon
CharLowerW
DrawTextW
ShowWindowAsync
DragObject
GetAltTabInfo
kernel32
GetLastError
VirtualProtect
GlobalAddAtomW
WriteConsoleOutputCharacterA
HeapReAlloc
PostQueuedCompletionStatus
GetConsoleAliasesLengthA
gdi32
TextOutA
RestoreDC
GdiEntry12
SetMetaFileBitsEx
SetBrushAttributes
Sections
.text Size: 3KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE