Static task
static1
Behavioral task
behavioral1
Sample
c5da7c04a73b40703d60303e6e15c9be.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c5da7c04a73b40703d60303e6e15c9be.exe
Resource
win10v2004-20240226-en
General
-
Target
c5da7c04a73b40703d60303e6e15c9be
-
Size
92KB
-
MD5
c5da7c04a73b40703d60303e6e15c9be
-
SHA1
c7eb16d9463cd2b3b4c58c735c1dd123909634b6
-
SHA256
c311fa960f71e76239c78aed0004c56cf3ae3ad5da65774008d3656db7068231
-
SHA512
48246a998de92d86d476492e424ce4b09fe9c1ea67be54fc1c589788efe5bf43fd3055eb53578bf5ec75223cf7d6e7bb289921b59e94ebf6523548dbda46cc9b
-
SSDEEP
1536:VSoJYu3UH2BB64VsXl0/QB1lHCi7UbkTMKxIluJkdqR4YY:VSoJ93mk7WUQJHR2uJkUR4p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5da7c04a73b40703d60303e6e15c9be
Files
-
c5da7c04a73b40703d60303e6e15c9be.exe windows:4 windows x86 arch:x86
825c8c962f92ba4a57dcf7ce6e244ffa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
HeapFree
lstrcmpA
FindClose
FindNextFileA
UnmapViewOfFile
Sleep
FindFirstFileA
lstrcpyA
FreeLibrary
VirtualAlloc
GetProcAddress
LoadLibraryA
GetVersionExA
CreateThread
lstrcatA
GetFileSize
GetCurrentProcess
CreateProcessA
WriteFile
LockResource
LoadResource
FindResourceA
CopyFileA
GetSystemDirectoryA
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemTime
HeapAlloc
GetCurrentProcessId
GetVersion
GetEnvironmentVariableA
CloseHandle
CreateFileA
GetProcessHeap
CreateFileMappingA
MapViewOfFileEx
GetModuleFileNameA
SetPriorityClass
GetModuleHandleA
ExitProcess
TerminateProcess
user32
wsprintfA
advapi32
RegSetValueExA
RegFlushKey
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
GetUserNameA
ws2_32
bind
connect
htons
inet_addr
gethostbyname
socket
inet_ntoa
recv
listen
send
htonl
WSAGetLastError
__WSAFDIsSet
select
ioctlsocket
WSAStartup
closesocket
accept
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ