Static task
static1
Behavioral task
behavioral1
Sample
5c4c10eb5bb26ff2628fea13fc17c0f6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c4c10eb5bb26ff2628fea13fc17c0f6.exe
Resource
win10v2004-20231222-en
General
-
Target
5c4c10eb5bb26ff2628fea13fc17c0f6
-
Size
190KB
-
MD5
5c4c10eb5bb26ff2628fea13fc17c0f6
-
SHA1
0ff963c23a30c0c17090052f5c32341cdf9788a6
-
SHA256
dd62dc0880fd916aa339d95d8cd0ba8e404da291ca74b1a2a82d00bb4ea078a9
-
SHA512
caac6abf29ef9bbafbb4ad4617f372228d0a884aa05a97a81ab4a874f0e57b4e251a9140b929cdc7d253b24a5c9ec21163123b258f71d27d4a6ce39a06f9b857
-
SSDEEP
3072:+3pNioJuS9Qx5UKaM7efAbU2ugUbqnsrz+DgO2ef4UqW8GBEshjm/b5o6TYPLERY:+5koAJ5U47e4I2ugSUsryDgBeqT+pNw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c4c10eb5bb26ff2628fea13fc17c0f6
Files
-
5c4c10eb5bb26ff2628fea13fc17c0f6.exe windows:4 windows x86 arch:x86
6e522bc10a9b17f1f4da1caf5a224205
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
rpcrt4
UuidCreate
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
kernel32
ReadFile
GetCommandLineA
WriteConsoleA
SetEndOfFile
GetThreadPriority
EnterCriticalSection
GetProcAddress
HeapReAlloc
UnhandledExceptionFilter
Sleep
GetCurrentDirectoryW
DeleteCriticalSection
WriteFile
GetLocaleInfoW
GetConsoleOutputCP
PurgeComm
InterlockedIncrement
TerminateProcess
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
SetStdHandle
GetUserDefaultLCID
GetCurrentThreadId
EnumResourceNamesA
GetModuleHandleA
LeaveCriticalSection
WideCharToMultiByte
GetModuleFileNameW
LCMapStringW
CloseHandle
InterlockedDecrement
GetCurrentProcess
CreateFileA
InitializeCriticalSection
ExitProcess
LCMapStringA
HeapFree
GetVersionExA
HeapAlloc
GlobalAlloc
GetLastError
IsDebuggerPresent
WriteConsoleW
RtlUnwind
GetProcessHeap
HeapSize
GetFullPathNameW
ExitProcess
SetUnhandledExceptionFilter
MultiByteToWideChar
GetCPInfo
RaiseException
GetFullPathNameA
user32
GetClassLongA
MessageBoxW
shell32
SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ