Static task
static1
Behavioral task
behavioral1
Sample
d350514f750d0425852a0799e9c9e5ba.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d350514f750d0425852a0799e9c9e5ba.exe
Resource
win10v2004-20240226-en
General
-
Target
d350514f750d0425852a0799e9c9e5ba
-
Size
133KB
-
MD5
d350514f750d0425852a0799e9c9e5ba
-
SHA1
0234035a7912120824fd92bacf58f7f3955df30f
-
SHA256
58f34607fc79d19d296bb2aea7feff0f6ea77304e058ef6fd1bbb352dff5c611
-
SHA512
bd2e5baf3077744cb224e4e61b1d9de71ac70007be2c4ba98dc93b5145c3f5d9b7ab44ce1cffd7bc3b994fd61c01f8634a34dc526dd071deeae15886cd3d5ed0
-
SSDEEP
3072:9TeLh8CPCBXBtsagV+4JuqXShU4T+UwAViyab1kiYXxT7uwtJLV9NihZaqvG:9opCXLUtIi4T9iyJ/XxtT3i20
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d350514f750d0425852a0799e9c9e5ba
Files
-
d350514f750d0425852a0799e9c9e5ba.exe windows:4 windows x86 arch:x86
5ac2884ada4505941a4db906a2abfdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
AllocConsole
BeginUpdateResourceA
CreateConsoleScreenBuffer
CreateFileMappingA
CreateMutexA
CreateWaitableTimerA
ExitProcess
FindAtomA
FindResourceA
GetAtomNameA
GetCommMask
GetCommandLineA
GetCurrentProcess
GetFileSize
GetFileTime
GetFileType
GetLargestConsoleWindowSize
GetModuleHandleA
GetNamedPipeHandleStateA
GetPrivateProfileStringA
GetProcAddress
GetStartupInfoA
GetSystemDefaultLCID
GlobalHandle
HeapReAlloc
LocalFlags
LocalLock
LocalReAlloc
MapViewOfFileEx
MulDiv
OpenEventA
PostQueuedCompletionStatus
PulseEvent
SetEvent
SetUnhandledExceptionFilter
UnmapViewOfFile
UpdateResourceA
VirtualFree
WideCharToMultiByte
WritePrivateProfileStructA
WriteProfileStringA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fputs
free
malloc
memset
signal
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE