Static task
static1
Behavioral task
behavioral1
Sample
d5592f771b10f68ec80242eba94a62c9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5592f771b10f68ec80242eba94a62c9.exe
Resource
win10v2004-20240226-en
General
-
Target
d5592f771b10f68ec80242eba94a62c9
-
Size
64KB
-
MD5
d5592f771b10f68ec80242eba94a62c9
-
SHA1
18d04f3b24cb817e3f19cbee2b6cd13154c9ed8b
-
SHA256
84c709439be00df7eab7570ccd818c2b5c2a30544a7f8cf7e28bf285bcf60a7d
-
SHA512
1679c2910b35fa212b051fe730a2e580c4cd4f227111e62409ec5c26972cd3928a423261fff395ef8d0719dbcf1591008741997de37442bc064469e1daec12be
-
SSDEEP
768:AczenmrFQ8K8Qj8xuJnXqYMiDEpTuYEuvP8uSIaSoj4sj6EBJuCmeptDyK6B7ci:3XpQ84j8xuJNeuYunfuCHlyK6B7ci
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5592f771b10f68ec80242eba94a62c9
Files
-
d5592f771b10f68ec80242eba94a62c9.exe windows:4 windows x86 arch:x86
8b5728550aa9c6f3a9daa0cef0b02be9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ClearBrushAttributes
AbortPath
BitBlt
ExcludeClipRect
AddFontResourceA
CloseMetaFile
ClearBitmapAttributes
CopyMetaFileA
DeleteObject
GetBrushOrgEx
SetTextColor
RestoreDC
AddFontMemResourceEx
CancelDC
CloseMetaFile
AddFontMemResourceEx
DeleteObject
GetBitmapBits
RestoreDC
GetDCOrgEx
AddFontResourceA
ClearBitmapAttributes
ExcludeClipRect
GetBrushOrgEx
CloseFigure
ExtTextOutA
ClearBrushAttributes
GetPixel
GetPixel
SetTextColor
BeginPath
advapi32
RegLoadKeyA
RegEnumKeyExA
RegQueryValueExW
RegOpenKeyA
RegCreateKeyExA
RegQueryInfoKeyW
RegQueryValueA
RegQueryInfoKeyA
RegReplaceKeyW
RegEnumValueW
RegQueryValueW
RegEnumKeyExW
RegOpenKeyExW
RegOpenKeyW
RegGetKeySecurity
RegDeleteValueA
RegOpenKeyExA
RegFlushKey
RegEnumKeyA
RegReplaceKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyW
RegLoadKeyA
RegEnumKeyExW
RegQueryValueExW
RegEnumKeyA
RegDeleteValueA
RegEnumValueW
RegDeleteValueW
RegOpenKeyExA
RegQueryInfoKeyA
RegOpenKeyA
RegEnumValueA
RegGetKeySecurity
RegReplaceKeyW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyA
RegQueryInfoKeyW
RegLoadKeyW
kernel32
DeleteFileA
GetComputerNameA
CreateProcessA
GetConsoleMode
DeleteAtom
GetFileTime
FindAtomA
DeleteFileW
ReadConsoleA
CopyFileExA
GetCommandLineA
ReadFile
GlobalFree
OpenFile
GetLastError
OpenFileMappingA
GetStdHandle
CreateDirectoryA
user32
CopyIcon
DrawTextA
DialogBoxParamW
DrawIcon
GetMenu
DrawTextW
AlignRects
IsWindow
EndDialog
GetCursor
DrawIconEx
GetDlgItem
LoadMenuA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ