Static task
static1
Behavioral task
behavioral1
Sample
d5750b38211eac08e31ec7f947764b72.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5750b38211eac08e31ec7f947764b72.exe
Resource
win10v2004-20240226-en
General
-
Target
d5750b38211eac08e31ec7f947764b72
-
Size
97KB
-
MD5
d5750b38211eac08e31ec7f947764b72
-
SHA1
5af5a1f67367ad68966fd10034adab06d0bf8542
-
SHA256
cb641c66b40fac6b6058d07fecc2aa12e82818fd865c3e1a46b7391f5b0ece9f
-
SHA512
f0aa36812fd23638382250bf90b699331f2f05823fbe8f3edd0de5356fa201aaba177f754dcff8f10bfb2fc834f0e1f95a2f84622d55e94bea00a81855f24ed9
-
SSDEEP
1536:iMCob/kI3QXgwlETFeEMbbHhNicme4Ghwu4HHy8viyfZwNWEkl0gRX:iqjT3ig+gFfMnhNzlt14HHy8DfZw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5750b38211eac08e31ec7f947764b72
Files
-
d5750b38211eac08e31ec7f947764b72.exe windows:5 windows x86 arch:x86
b1b1f2d047d5385ab63bd6d03efa0c18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
DialogBoxParamW
CalcMenuBar
DrawTextW
BeginPaint
AppendMenuA
GetDC
GetWindowTextA
AppendMenuW
IsWindow
BlockInput
CopyImage
InsertMenuA
GetDlgItem
DrawIcon
LoadMenuA
AppendMenuW
CopyRect
CalcMenuBar
CloseWindow
GetWindowTextA
DrawIconEx
IsWindow
CopyImage
DialogBoxParamW
BlockInput
DrawIcon
InsertMenuA
CopyImage
DialogBoxParamA
CopyIcon
CreateIcon
AppendMenuA
CalcMenuBar
GetCursor
IsWindow
CopyRect
BlockInput
DrawTextW
BeginPaint
DrawTextA
LoadCursorA
DrawTextA
DrawTextW
CloseWindow
CopyIcon
GetDlgItem
AppendMenuW
DrawIconEx
BlockInput
LoadCursorA
AlignRects
GetMenu
GetDC
kernel32
OpenFileMappingA
CopyFileExA
FlushFileBuffers
ExitProcess
AddAtomW
DeleteFileA
GetStdHandle
CopyFileExW
FreeResource
GetCPInfo
AddAtomA
GlobalFree
ReadFile
FindClose
GetCommandLineA
FindAtomW
DeleteAtom
DeleteFileW
GetLocalTime
GetPriorityClass
GetFileTime
CreateDirectoryA
WriteFile
CreateDirectoryA
ReadFile
CopyFileExA
GlobalFree
FindAtomW
DeleteFileW
FreeResource
FindClose
GetLocalTime
CopyFileExW
DeleteAtom
AddAtomA
ExitThread
FindAtomA
CopyFileA
AddAtomW
GetCommandLineA
FatalExit
ExitThread
GetFileTime
DeleteFileW
ReadFile
CreateDirectoryA
GetPriorityClass
GetCPInfo
DeleteAtom
WriteFile
OpenFileMappingA
GetFileType
CopyFileA
FlushFileBuffers
FindAtomW
GlobalFree
CopyFileExA
FindClose
GetLocalTime
FatalExit
DeleteAtom
GetStdHandle
GetCommandLineA
GetCPInfo
CopyFileExW
CreateDirectoryA
FreeResource
GetPriorityClass
ExitThread
DeleteFileA
FlushFileBuffers
GetFileTime
GlobalFree
DeleteFileW
ExitProcess
GetCommandLineA
FlushFileBuffers
DeleteAtom
DeleteFileA
OpenFileMappingA
CopyFileExA
CopyFileExW
FatalExit
GetLocalTime
GetStdHandle
GetCPInfo
OpenFile
DeleteAtom
GetLocalTime
OpenFile
GlobalFree
FindClose
OpenFileMappingA
FreeResource
CreateDirectoryA
CopyFileExW
GetFileType
AddAtomA
AddAtomW
GetFileTime
DeleteFileA
CopyFileExA
FindClose
GetStdHandle
DeleteFileA
AddAtomA
CopyFileA
FindAtomA
GetCPInfo
FlushFileBuffers
AddAtomW
FatalExit
GetLastError
ReadFile
ExitThread
WriteFile
GetFileType
WriteFile
DeleteAtom
CopyFileExA
GetCPInfo
GetCommandLineA
GlobalFree
FatalExit
GetPriorityClass
DeleteFileW
AddAtomW
GetLastError
ExitThread
OpenFile
FindAtomA
GetStdHandle
GetFileTime
FreeResource
CopyFileExW
CopyFileExA
GetFileTime
CreateDirectoryA
ReadFile
GetCPInfo
GetStdHandle
GetFileType
FreeResource
FatalExit
FindAtomW
DeleteFileA
OpenFile
AddAtomW
GlobalFree
ExitProcess
DeleteFileA
GetFileType
AddAtomA
FreeResource
GetStdHandle
ReadFile
GlobalFree
CopyFileExW
OpenFileMappingA
OpenFile
DeleteAtom
GetLastError
AddAtomW
WriteFile
FindAtomW
advapi32
RegDeleteValueA
RegOpenKeyExA
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegCreateKeyW
RegReplaceKeyW
RegReplaceKeyA
RegFlushKey
RegDeleteKeyA
RegLoadKeyW
RegOpenKeyA
RegQueryInfoKeyA
RegQueryValueA
RegEnumValueA
RegDeleteKeyW
RegCreateKeyExA
RegOpenKeyA
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyW
RegEnumValueA
RegDeleteValueW
RegGetKeySecurity
RegEnumValueW
RegCreateKeyA
RegLoadKeyA
RegDeleteKeyA
RegFlushKey
RegQueryValueExW
RegLoadKeyA
RegEnumKeyExA
RegQueryValueExW
RegReplaceKeyW
RegGetKeySecurity
RegEnumKeyW
RegEnumValueA
RegOpenKeyW
RegOpenKeyExA
RegCreateKeyExW
RegDeleteValueW
RegQueryValueW
RegCreateKeyExW
RegReplaceKeyW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegLoadKeyA
RegEnumKeyExA
RegCreateKeyW
RegQueryValueExA
RegDeleteValueW
RegFlushKey
RegReplaceKeyA
RegEnumKeyW
RegQueryInfoKeyW
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyW
RegQueryValueW
RegOpenKeyExA
RegEnumValueW
RegQueryValueExW
RegEnumKeyA
RegGetKeySecurity
RegReplaceKeyA
RegCreateKeyExW
RegDeleteValueA
RegEnumKeyExW
RegQueryInfoKeyA
Sections
.b41ec Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.e1ah9 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7630 Size: 45KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.30g84 Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fhhe4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 875B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ