Static task
static1
Behavioral task
behavioral1
Sample
c5bc2f583ca9487c71db39375dad4f79.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5bc2f583ca9487c71db39375dad4f79.exe
Resource
win10v2004-20240226-en
General
-
Target
c5bc2f583ca9487c71db39375dad4f79
-
Size
600KB
-
MD5
c5bc2f583ca9487c71db39375dad4f79
-
SHA1
5a6745b84172c3505a0a782f22ae6b8e9a2ca81d
-
SHA256
14b240005838c0e3da5ff2a46834ff2a3c5e670c646fe3e56a6b631afd424659
-
SHA512
feb5484b704863950d48cdd861207ec4b74c7e63736cfc1c8527b5ecee768fe7c2d9e4186a072b62e23d1caf104f89e6b910697bfed98ecbddb7911e9299e450
-
SSDEEP
12288:+LLW3YkbfrvvVQqeOF6rSdx5MzBp+HJfh/bu1onCRGN0ZKJ/p:a63ZfaqhgUx5MzBp+HJZDu1fRGN0Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5bc2f583ca9487c71db39375dad4f79
Files
-
c5bc2f583ca9487c71db39375dad4f79.exe windows:4 windows x86 arch:x86
fed32c965ae9c8dec86e4b2fa4b20080
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
InSendMessageEx
TranslateMDISysAccel
OpenDesktopA
RegisterClassA
GetMenuState
ReuseDDElParam
RegisterClassExA
ExcludeUpdateRgn
SetPropA
DdeInitializeA
ReleaseDC
SetActiveWindow
WindowFromPoint
EnumWindowStationsA
ShowWindow
GetWindowPlacement
MessageBoxA
ChildWindowFromPointEx
GetLastActivePopup
EndMenu
GetActiveWindow
DdeConnectList
CreateWindowExW
DefWindowProcA
SetDlgItemInt
OpenInputDesktop
FreeDDElParam
GetDlgCtrlID
UnhookWindowsHookEx
DlgDirSelectComboBoxExA
UnregisterDeviceNotification
FindWindowW
EqualRect
DlgDirListA
SetMenuInfo
CreateCaret
GetClipboardOwner
SetWindowsHookA
SetWinEventHook
MapDialogRect
comctl32
CreateStatusWindow
DrawStatusTextW
InitMUILanguage
CreateToolbarEx
CreatePropertySheetPageA
InitCommonControlsEx
ImageList_SetFilter
ImageList_EndDrag
DestroyPropertySheetPage
ImageList_Write
kernel32
LocalFileTimeToFileTime
GetLocaleInfoA
GetStringTypeA
GetProfileStringW
SystemTimeToFileTime
GetCurrentProcessId
HeapReAlloc
LoadLibraryA
VirtualQuery
GetTimeZoneInformation
MapViewOfFileEx
GetStartupInfoW
GetACP
GetCommandLineW
QueryPerformanceCounter
GetModuleHandleA
GetProfileIntW
MultiByteToWideChar
VirtualFree
SetEnvironmentVariableA
GetUserDefaultLCID
WriteConsoleW
SetSystemTime
WriteConsoleA
GetConsoleMode
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
LCMapStringW
GetConsoleOutputCP
lstrlenW
GlobalGetAtomNameW
TlsGetValue
WaitForMultipleObjects
ReadConsoleOutputA
CreateMailslotW
GetConsoleCP
FlushFileBuffers
GetOEMCP
ExitProcess
HeapCreate
RtlUnwind
IsValidCodePage
GetPrivateProfileIntW
CreateMutexA
FreeEnvironmentStringsW
GetStdHandle
lstrlen
GetModuleFileNameW
GetTimeFormatA
GetEnvironmentStringsW
OpenMutexA
GetModuleFileNameA
ReadConsoleInputW
FlushViewOfFile
GlobalAddAtomA
SetLastError
ExpandEnvironmentStringsW
DeleteCriticalSection
InterlockedDecrement
LocalFree
GetStringTypeW
GetCurrentThreadId
CompareStringW
GetCommandLineA
FreeLibrary
GetModuleHandleW
GetLastError
IsDebuggerPresent
VirtualAlloc
OpenEventW
CompareStringA
EnumSystemLocalesA
OpenWaitableTimerW
SetThreadIdealProcessor
WriteFile
CreateFileA
GetLocaleInfoW
GetFileType
WideCharToMultiByte
SetHandleCount
GetProcAddress
GetCurrentThread
GetWindowsDirectoryA
HeapAlloc
UnhandledExceptionFilter
HeapFree
TerminateProcess
TlsFree
IsValidLocale
GetCurrentProcess
LocalSize
GlobalFix
InterlockedIncrement
LCMapStringA
ReadConsoleW
SetConsoleScreenBufferSize
SetUnhandledExceptionFilter
UnmapViewOfFile
ReadFile
CloseHandle
TlsSetValue
HeapSize
lstrcpyn
InterlockedExchange
GetStartupInfoA
CreateFileMappingW
SetConsoleCtrlHandler
VirtualLock
FindClose
SetStdHandle
SetFilePointer
GetTickCount
LocalAlloc
GetSystemTimeAsFileTime
HeapDestroy
GetCPInfo
GetDateFormatA
Sleep
TlsAlloc
Sections
.text Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ