Static task
static1
Behavioral task
behavioral1
Sample
5bd8e17273c1827864dfc50f69ee2c2d31baa5585a0f39edabff8aee580de5e5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5bd8e17273c1827864dfc50f69ee2c2d31baa5585a0f39edabff8aee580de5e5.exe
Resource
win10v2004-20240226-en
General
-
Target
5bd8e17273c1827864dfc50f69ee2c2d31baa5585a0f39edabff8aee580de5e5
-
Size
6.5MB
-
MD5
29a2fe7c36ccdde94266909a9b4a1569
-
SHA1
7c631609b4b2195bf6b42fc73181824ae1500649
-
SHA256
5bd8e17273c1827864dfc50f69ee2c2d31baa5585a0f39edabff8aee580de5e5
-
SHA512
f11ebd8cacd77295cc88e9238a22817e412b17f7593812655d9df25e71dc22c037afbe041256b07cdddf17ddd349317864867ad7c92e3c5ad22c73ecc5bbd545
-
SSDEEP
196608:rU0M+Khp3Ph31L80/fKYU4sMiMb6waMRQ:9lKhZp31LffKF4PiW6q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bd8e17273c1827864dfc50f69ee2c2d31baa5585a0f39edabff8aee580de5e5
Files
-
5bd8e17273c1827864dfc50f69ee2c2d31baa5585a0f39edabff8aee580de5e5.exe windows:5 windows x86 arch:x86
5abaa3c02db69cd3716e000d08420f01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetMenu
CharUpperBuffW
gdi32
Escape
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHChangeNotify
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 439KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.##[ Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.<vV Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.{8z Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
._e+ Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ