Static task
static1
Behavioral task
behavioral1
Sample
b52c9f86d85da1ed214e0f158768e94f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b52c9f86d85da1ed214e0f158768e94f.exe
Resource
win10v2004-20240226-en
General
-
Target
b52c9f86d85da1ed214e0f158768e94f
-
Size
425KB
-
MD5
b52c9f86d85da1ed214e0f158768e94f
-
SHA1
16dce4fe8ea8f9cb1cc5def03f848e22084ed20a
-
SHA256
32e7537db6a675e1ec104f40e2e221c306b3a95dba47d99fe73a0c9e69d25e5b
-
SHA512
28a989ceabcd719bdd0f2364503bc11c1d7f9ea08d47bce1c67e54dcff47161a5dd4cd862634a3d28877d36aba0d069ba8edde919610c5518f005a234592e97a
-
SSDEEP
12288:3ez6VYtlUd/NDyBdapbjoC6qrDz4c+FpavV:5yle/FyBdsbUCZcc+zi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b52c9f86d85da1ed214e0f158768e94f
Files
-
b52c9f86d85da1ed214e0f158768e94f.exe windows:4 windows x86 arch:x86
ed11aea129838323d0d8aaad14c3ccfa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumSystemLocalesA
GetEnvironmentStringsW
FormatMessageA
GetCurrentProcess
GetSystemTimeAsFileTime
SetLastError
GetCommandLineW
CompareStringW
GetUserDefaultLCID
GetLocaleInfoA
TlsGetValue
HeapFree
TlsFree
GetCPInfo
SetEnvironmentVariableA
FindFirstFileA
GetModuleHandleA
IsValidLocale
ExitProcess
GetTimeZoneInformation
FindResourceA
HeapReAlloc
IsValidCodePage
IsDebuggerPresent
LCMapStringW
WideCharToMultiByte
GetCurrentProcessId
DeleteCriticalSection
GetCurrentThreadId
SetUnhandledExceptionFilter
HeapCreate
EnterCriticalSection
GetModuleFileNameA
VirtualAlloc
FreeEnvironmentStringsW
SetConsoleCtrlHandler
GetPrivateProfileSectionA
lstrlenW
InitializeCriticalSectionAndSpinCount
GetFileType
GetLocaleInfoW
CompareStringA
InterlockedDecrement
HeapSize
GetConsoleMode
GetTickCount
Sleep
GetModuleHandleW
InterlockedExchange
RtlUnwind
GetStartupInfoW
MultiByteToWideChar
GetStartupInfoA
GetOEMCP
LeaveCriticalSection
LoadLibraryA
GetModuleFileNameW
FreeLibrary
SetHandleCount
GetProcAddress
GetStringTypeA
TlsSetValue
GetLastError
LCMapStringA
GetTimeFormatA
QueryPerformanceCounter
OpenWaitableTimerW
VirtualQuery
HeapDestroy
WriteFile
GetStdHandle
GetStringTypeW
GetCurrentThread
TlsAlloc
GetDateFormatA
TerminateProcess
IsBadWritePtr
HeapAlloc
VirtualFree
InterlockedIncrement
UnhandledExceptionFilter
GetACP
wininet
ShowCertificate
InternetOpenW
FtpRenameFileW
user32
DdeQueryNextServer
AdjustWindowRect
GetMenuDefaultItem
shell32
ShellExecuteA
SHUpdateRecycleBinIcon
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ