K:\ubQK\imOpvyribzSa4\MKpxhQE\yqsnADe.lyb
Static task
static1
Behavioral task
behavioral1
Sample
c5ed4cabf40ab2ab3c9375ad350096fe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5ed4cabf40ab2ab3c9375ad350096fe.exe
Resource
win10v2004-20240226-en
General
-
Target
c5ed4cabf40ab2ab3c9375ad350096fe
-
Size
146KB
-
MD5
c5ed4cabf40ab2ab3c9375ad350096fe
-
SHA1
a662bfedc9a54a76bea8db2affe6a75c780fdfac
-
SHA256
dcdeb1800619402e3887edf69c5f583413d5e2d99be36eba2c5d189c56f1fc6f
-
SHA512
3272c9ba21ce5ccb5d19066cc4a4e3cbadf72b7d25a3b9c4db44ba1c796c68ef46f154684e91eeb47ee1432d0fd158b7b41d8c45bdbad8aaa6af9459d65b9097
-
SSDEEP
3072:+Q3pFp35GjErsqKZA1IVKvCYgkZ7TdNrESMGwp9:7p735Gg7KZzVKqYbf1kG6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5ed4cabf40ab2ab3c9375ad350096fe
Files
-
c5ed4cabf40ab2ab3c9375ad350096fe.exe windows:5 windows x86 arch:x86
f1310f7ed2f0c5c27b6e2860538c44d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathParseIconLocationA
StrStrW
PathCompactPathExW
kernel32
SetupComm
lstrlenA
GetCommState
LoadLibraryW
GlobalFix
SetMessageWaitingIndicator
CreateJobSet
lstrcpyA
GetSystemTimeAdjustment
LoadLibraryExW
OpenSemaphoreW
lstrcmpiW
CreateFileMappingA
MapViewOfFile
GetModuleHandleExW
GetTapePosition
user32
CharUpperA
GetClipCursor
CopyImage
GetSubMenu
DrawTextW
GetWindowRect
GetClientRect
GetForegroundWindow
GetMenu
SetLastErrorEx
GetAltTabInfoA
RedrawWindow
AdjustWindowRect
GetDialogBaseUnits
ModifyMenuA
GetClipboardOwner
DestroyCursor
MapWindowPoints
gdi32
GetEnhMetaFileHeader
SetMiterLimit
SetDCBrushColor
SetViewportOrgEx
GetFontData
CreateRectRgn
GetTextCharsetInfo
GetRgnBox
CreateFontIndirectW
DeleteEnhMetaFile
SetEnhMetaFileBits
Exports
Exports
?_DrawFocusRect@@YGKPAD0PAG@Z
?_FillRect@@YGKPAD0@Z
?_FrameRect@@YGPAXPAKPAEPAI@Z
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RData Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CData Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 706B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ