Static task
static1
Behavioral task
behavioral1
Sample
5c3a171b1513cb6b91f9c0ceef6f59db.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c3a171b1513cb6b91f9c0ceef6f59db.exe
Resource
win10v2004-20231215-en
General
-
Target
5c3a171b1513cb6b91f9c0ceef6f59db
-
Size
3.4MB
-
MD5
5c3a171b1513cb6b91f9c0ceef6f59db
-
SHA1
d13d58fd1a6e181e2e6b7507653398e048b0228a
-
SHA256
8685cbe7920330ae9aa70a63bf1b2022abf3193c805e9907e84ba8f6bf38ea97
-
SHA512
94384866cbbb1d54baf566828b263d03e5efdd6be664babe0e73f3b0acdf11005f584aa6bc62f3d548c81406fcb7a9c18ae0c79eaaaced617899e8c8a84ac7b0
-
SSDEEP
49152:J1MPtc7147kHiha+YpIao2UPmj5eK4tDLsGfwVna/cQ+G6QRexXro82UQ+XTJc5q:zMPtAW7kHwaP6DgGf2a/bjtex7vDH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c3a171b1513cb6b91f9c0ceef6f59db
Files
-
5c3a171b1513cb6b91f9c0ceef6f59db.exe windows:4 windows x86 arch:x86
30f5ca4e1315fe187cda13667e137061
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
CloseHandle
UnhandledExceptionFilter
FreeLibrary
SetLastError
HeapAlloc
DeleteCriticalSection
EnterCriticalSection
WriteFile
WaitForSingleObject
GetProcessHeap
CreateFileW
GetStdHandle
GetStartupInfoW
FindClose
ReadFile
GetACP
FormatMessageW
InitializeCriticalSection
GetConsoleMode
CreateEventW
TlsAlloc
LoadLibraryW
LoadLibraryExW
GetFileAttributesW
GetStringTypeW
GetOEMCP
GetEnvironmentStringsW
SetStdHandle
FreeEnvironmentStringsW
IsValidCodePage
VirtualAlloc
GetConsoleCP
LocalAlloc
GetCommandLineA
DecodePointer
GetVersionExW
CreateFileA
OutputDebugStringW
GetFileSize
LoadLibraryA
GetModuleHandleExW
CreateDirectoryW
UnmapViewOfFile
user32
ShowWindow
DestroyWindow
ReleaseDC
DefWindowProcW
GetDlgItem
SendMessageW
SetWindowTextW
SetTimer
LoadIconW
GetSysColor
PeekMessageW
EndPaint
BeginPaint
SetCursor
KillTimer
InvalidateRect
RegisterClassW
GetWindowTextW
UpdateWindow
SystemParametersInfoW
MessageBoxA
CharUpperW
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ