Static task
static1
Behavioral task
behavioral1
Sample
5c3de080e2174dc18c29d5dccabfc487.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5c3de080e2174dc18c29d5dccabfc487.exe
Resource
win10v2004-20231215-en
General
-
Target
5c3de080e2174dc18c29d5dccabfc487
-
Size
90KB
-
MD5
5c3de080e2174dc18c29d5dccabfc487
-
SHA1
9de07034f92627fbb371243f97acf2e5458b0a66
-
SHA256
2211fc031874cb61fcb095bd8e85dfb92530ba42502305059b5e29efccfb018c
-
SHA512
e83a96b1bd371534f33755ef50eeb20e6045e63a65c5ffcd3957eec5ea86a0c0617d8494484217c09ede7c7dc99c2f47550c99144658def14b087134873a1ed9
-
SSDEEP
1536:+QdK2eaVkP4630/fEjyKyueAN7W2vvTCGY5BfcHOsCpu25WX3rzfmi//PDixo4Po:BNedZkBKjDdY5+Oppu25WHris/LQo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c3de080e2174dc18c29d5dccabfc487
Files
-
5c3de080e2174dc18c29d5dccabfc487.exe windows:4 windows x86 arch:x86
de6fdcdc7f4ad649a7529bf91b3c3b02
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
ws2_32
WSCInstallProvider
Sections
CODE Size: 84KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE