Static task
static1
Behavioral task
behavioral1
Sample
wdslfksdf.exe
Resource
win10v2004-20240221-en
General
-
Target
wdslfksdf.exe
-
Size
7.5MB
-
MD5
c7908f08f9c526520cf5d1292688a98f
-
SHA1
a27c4623998f88a4de7e13a97565b946de3c0286
-
SHA256
2aac02c5bef87c05551992fbbe2ac321186b59fbbb653391f34b021e18d9a622
-
SHA512
eca416972233347dd1e115fabcfc7e0a5c0dbbb3466dd23756b2c1ba0e0b21e963fe79634285672658a1860896fe3a9d2eaab087ae8fe29da19ad6d532746244
-
SSDEEP
98304:yO/upfZ5cDYkLuTI1c4MbISDSDaYkWTt5gROSwtQWW28jlexcDtPTN/ylSOZ5fBI:2fZ+9XsDSDaOH5W284Q5ROZ3tX88yP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource wdslfksdf.exe
Files
-
wdslfksdf.exe.exe windows:5 windows x86 arch:x86
98ff18fb0433db6942f9a5da4c8d10a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
qt5core
_Z21qRegisterResourceDataiPKhS0_S0_
qt5gui
_ZN5QFont12setPointSizeEi
qt5network
_ZN10QTcpSocketC1EP7QObject
qt5widgets
_ZN10QBoxLayout10addStretchEi
qt5xml
_ZN11QDomElement12setAttributeERK7QStringS2_
advapi32
RegCloseKey
libgcc_s_dw2-1
_Unwind_Resume
kernel32
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
msvcrt
__dllonexit
shell32
CommandLineToArgvW
user32
RegisterDeviceNotificationW
CharUpperBuffW
libstdc++-6
_ZNSs12_S_constructEjcRKSaIcE
Sections
.text Size: - Virtual size: 647KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6HH0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.6HH1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6HH2 Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE