Static task
static1
Behavioral task
behavioral1
Sample
5c36e09442da96e9a677d6e87ddd28e6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c36e09442da96e9a677d6e87ddd28e6.exe
Resource
win10v2004-20231215-en
General
-
Target
5c36e09442da96e9a677d6e87ddd28e6
-
Size
400KB
-
MD5
5c36e09442da96e9a677d6e87ddd28e6
-
SHA1
9717fbb374cf8c06f20d9e12fefb25c277f7417c
-
SHA256
98bc833cb59729284927ed8344b9e7ee67864aeb4312c26b41e6f36338350663
-
SHA512
4240ccb9cc8ca710a11e2ebea09aea2febe9857774fd286c031015cec6b81885b2ccb17fbcb5c8db3e9d042480e944c40254c4a5a1852c6142aa36ce3a18e44e
-
SSDEEP
6144:+4HJziMgJ2ePAo1OcABmNrN1wqqeL0UPSWiomaZvbHjScoZEcx0DQYC2ECvgPALb:h9gRPNR3NysmUDHj0Zr6hC1kgPAL84x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c36e09442da96e9a677d6e87ddd28e6
Files
-
5c36e09442da96e9a677d6e87ddd28e6.exe windows:5 windows x86 arch:x86
7ca1acfa87650163c8a39c670d28a97e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GlobalMemoryStatusEx
RaiseException
GlobalFix
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FormatMessageW
LocalFree
SetCurrentDirectoryW
GetExitCodeProcess
CreateMutexW
GetACP
user32
DrawIcon
IsZoomed
LoadIconW
SystemParametersInfoW
GetCursorPos
SetParent
GetWindowDC
wsprintfA
SetWindowPos
GetParent
SetRect
GetWindowRect
SetTimer
ShowWindow
LoadImageW
GetDC
ReleaseDC
FindWindowW
SetWindowLongW
UpdateWindow
CallWindowProcW
KillTimer
GetActiveWindow
MessageBoxW
InvalidateRect
AppendMenuW
GetClientRect
PeekMessageW
TranslateMessage
EnableWindow
GetClassInfoW
PostMessageW
SendMessageW
odbc32
SQLGetTypeInfoW
Sections
.text Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ