Static task
static1
Behavioral task
behavioral1
Sample
b53c2f124049327ed0c93d9bff2ade2e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b53c2f124049327ed0c93d9bff2ade2e.exe
Resource
win10v2004-20240226-en
General
-
Target
b53c2f124049327ed0c93d9bff2ade2e
-
Size
157KB
-
MD5
b53c2f124049327ed0c93d9bff2ade2e
-
SHA1
8d7aee55b188800348d3c79ba333980ef0f2ce1a
-
SHA256
9ba02bc253144c5ad91167b778ff8952d6a49abf08f6fe9c9d1030aff3dbc942
-
SHA512
2d825cbd05da9a2017418752505b8e6e1f33f1a66e0736dd3f0b51773bf816a13e656280bd27f1f59e9186e840a786dc8b7882dd38b76dee61d3cd1dc68288f9
-
SSDEEP
3072:7phwyX5Fpu8L+ZhEz98KT08nDBcDfINn1Lo0dRu/NzkWQ9u1lgssa5y:7PwoPu8CZhEBqYBcMN9u1z9ll3R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b53c2f124049327ed0c93d9bff2ade2e
Files
-
b53c2f124049327ed0c93d9bff2ade2e.exe windows:4 windows x86 arch:x86
7f0fc3beaf78fa922d62c48321576926
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FillConsoleOutputCharacterA
GetLastError
lstrcpyW
OutputDebugStringW
GetACP
GetProcessWorkingSetSize
lstrcmpiW
MultiByteToWideChar
LockResource
GetTickCount
WideCharToMultiByte
FindClose
EnumResourceNamesA
lstrlenW
GlobalFree
InitializeCriticalSection
FreeEnvironmentStringsW
GetCPInfo
GlobalAlloc
lstrcpyA
CreateFileMappingW
GetModuleHandleW
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
TranslateMessage
GetMessageW
SendMessageA
SetTimer
GetDC
CharNextW
DispatchMessageW
PostThreadMessageW
wsprintfW
CharUpperW
KillTimer
UnregisterClassA
advapi32
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
ole32
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoTaskMemFree
CoRegisterClassObject
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoRevokeClassObject
StringFromCLSID
shlwapi
PathCombineW
PathFileExistsW
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ