Static task
static1
Behavioral task
behavioral1
Sample
5fe378690b8d80290f81dd5bfc5c8c18.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5fe378690b8d80290f81dd5bfc5c8c18.exe
Resource
win10v2004-20231215-en
General
-
Target
5fe378690b8d80290f81dd5bfc5c8c18
-
Size
80KB
-
MD5
5fe378690b8d80290f81dd5bfc5c8c18
-
SHA1
b81315ebdc5a40cb96999e7eb8566b17165ef3af
-
SHA256
74120250d0dbace2df52e10b8fe9ce2c7ebd8d64416ce39a1f7dcec998b6164e
-
SHA512
b8519a197cfb975bc0c9effcc4c14d878f3aaa53147b203b6122c51548446808accc2a1bc7d14ddfdc55016812f0a67bb77430eef1ae72702d669defb1e87bfa
-
SSDEEP
1536:yQ/vZZtAaijmx4SAmOZ8lGsZyoSq/SgnVMTbG:HvHtHijbSAmOylRT/SgnqTi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fe378690b8d80290f81dd5bfc5c8c18
Files
-
5fe378690b8d80290f81dd5bfc5c8c18.exe windows:4 windows x86 arch:x86
dab93e629631b806046ad745b19a8ecd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
GetModuleFileNameA
FindResourceA
GetProcAddress
LoadLibraryA
VirtualProtect
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadResource
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetOEMCP
LockResource
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW
user32
GetDlgItemTextA
SetWindowTextA
FindWindowA
PostQuitMessage
GetSystemMenu
AppendMenuA
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
SetDlgItemTextA
DialogBoxParamA
gdi32
GetStockObject
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE