Static task
static1
Behavioral task
behavioral1
Sample
c5acf551b7668b3d3b57e7263115ac7d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5acf551b7668b3d3b57e7263115ac7d.exe
Resource
win10v2004-20240226-en
General
-
Target
c5acf551b7668b3d3b57e7263115ac7d
-
Size
291KB
-
MD5
c5acf551b7668b3d3b57e7263115ac7d
-
SHA1
39a4b7b4bec38c82457a01efa33e70846e56e803
-
SHA256
b098f3a56dfa1bd6f9d8aab548230839358265698512760783ac45866fc32e22
-
SHA512
8a8a1fbf35085381df7b60cfa12b429c6c969c59f5075f4d44c72e957ef35be8ee1ee3521e79a4f57a86cc2110d2a91ef8a0639fdad084cc728cdb098b4053f6
-
SSDEEP
6144:+Xst4GGLRLxPw5YtRXnFbwR2fLiXJ5/e/VR02TONMGFu99:NGGmLdw5YRXnFb4iiXJo/VqiGFG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5acf551b7668b3d3b57e7263115ac7d
Files
-
c5acf551b7668b3d3b57e7263115ac7d.exe windows:4 windows x86 arch:x86
a6f5036b5d719010605dc3ff03d8110c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetConsoleAliasA
FindClose
Sleep
CreateFileMappingA
GetACP
GetCalendarInfoA
GetConsoleCP
FindAtomA
LocalFree
GetLastError
TlsGetValue
GetModuleHandleA
HeapCreate
LocalLock
WaitForSingleObjectEx
CreateFileA
FreeEnvironmentStringsA
LoadLibraryExA
GlobalUnlock
user32
DrawEdge
GetDlgItem
CallWindowProcA
CascadeWindows
IsWindow
DispatchMessageA
GetIconInfo
DrawTextA
GetDC
DefWindowProcA
CreateDialogParamA
GetMessageA
SetFocus
MessageBoxA
msasn1
ASN1BERDecEoid
ASN1BEREncFlush
ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecCheck
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ