Static task
static1
Behavioral task
behavioral1
Sample
d5211696de52e5cd1ebf994f2025e57d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d5211696de52e5cd1ebf994f2025e57d.exe
Resource
win10v2004-20240226-en
General
-
Target
d5211696de52e5cd1ebf994f2025e57d
-
Size
115KB
-
MD5
d5211696de52e5cd1ebf994f2025e57d
-
SHA1
29a77029c74a7892a7fb0536cbc31d1787a6b33c
-
SHA256
e60f0004b81188fc9c7fd0ffec9494300ff25e3b63b07a7232c1849ad61f3bc0
-
SHA512
9bf3e1b8721610f50e40753dcb3ae57f25b5112c8d667c5494fbb60670f0fe95b6e3484efa3e449bd49962c5726a6fecf7cf72040668dfe0f6f0288bcbd3a8fc
-
SSDEEP
1536:44d2naGF3DWF3YAnZdPC4akuI5kY+iH4EA+gIAZt5QMkbcN2lkGdHL:4FX1DWphnZdPxakuwb4EwbZt57qkGB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5211696de52e5cd1ebf994f2025e57d
Files
-
d5211696de52e5cd1ebf994f2025e57d.exe windows:5 windows x86 arch:x86
88bcf0c0ccd5b7bb3d4fceb468e82beb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
CharNextA
GetSystemMetrics
GetParent
GetDesktopWindow
gdi32
SetMapMode
DeleteDC
GetTextMetricsA
RestoreDC
GetPixel
LineTo
GetClipBox
GetObjectA
SetStretchBltMode
CreateFontIndirectA
SelectPalette
GetDeviceCaps
CreatePen
CreateSolidBrush
SelectObject
SetTextAlign
SaveDC
DeleteObject
CreateCompatibleDC
RectVisible
PatBlt
GetStockObject
CreatePalette
SetTextColor
SetPixel
kernel32
GetDriveTypeA
IsDebuggerPresent
GetCommandLineA
GetConsoleOutputCP
lstrcmpA
MulDiv
lstrcmpiW
GetStartupInfoA
GetThreadLocale
GetUserDefaultLangID
GetModuleHandleA
lstrlenW
lstrlenA
GetCommandLineW
SetCurrentDirectoryA
GetCurrentProcess
QueryPerformanceCounter
GlobalFindAtomW
GlobalFindAtomA
GetProcessHeap
RemoveDirectoryA
GetCurrentThread
DeleteFileA
GetCurrentProcessId
DeleteFileW
GetVersion
GetTickCount
GetModuleHandleW
GetWindowsDirectoryA
CopyFileA
lstrcmpiA
GetACP
RemoveDirectoryW
GetCurrentThreadId
GetOEMCP
VirtualAlloc
VirtualFree
glu32
gluQuadricCallback
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ