Static task
static1
Behavioral task
behavioral1
Sample
d5e95e16c53851eb6fdd97133cdc28ef.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5e95e16c53851eb6fdd97133cdc28ef.exe
Resource
win10v2004-20240226-en
General
-
Target
d5e95e16c53851eb6fdd97133cdc28ef
-
Size
35KB
-
MD5
d5e95e16c53851eb6fdd97133cdc28ef
-
SHA1
bbe0e229c99f513f661e56beea05930a1348c2ac
-
SHA256
8d703db38af48556e1e355eb29f41eca95c934d6092e257b3e5eb79c8716833e
-
SHA512
1456dbac27047b8f3fbb5ac2ce1de18db464eccba05e0c2d2b207597706ec62671a6f2683e5658fe2420a04364d695e2aa3819586194dbc993540b67e5140bcf
-
SSDEEP
384:8QpmKKS+jqtF92NceQkVKF8z1zbNjCxk8vOp6sTQ:lm1S+IONcf0hNj+rvYTQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5e95e16c53851eb6fdd97133cdc28ef
Files
-
d5e95e16c53851eb6fdd97133cdc28ef.exe windows:5 windows
a3a642d9845af66356006b2255125649
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
rasapi32
DDMGetPhonebookInfo
glu32
gluBeginCurve
gluBeginPolygon
gluBeginSurface
gluBeginTrim
gluBuild1DMipmaps
gluBuild2DMipmaps
gluCylinder
gluDeleteNurbsRenderer
gluDeleteQuadric
gluDeleteTess
gluDisk
gluEndCurve
gluEndPolygon
gluEndSurface
gluEndTrim
gluErrorString
gluErrorUnicodeStringEXT
gluGetNurbsProperty
gluGetString
gluGetTessProperty
gluLoadSamplingMatrices
gluLookAt
gluNewNurbsRenderer
gluNewQuadric
gluNewTess
gluNextContour
gluNurbsCallback
gluNurbsCurve
gluNurbsProperty
gluNurbsSurface
gluOrtho2D
kernel32
MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalFree
SetConsoleTitleW
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA
msdtcprx
DTC_XaOpen
DTC_XaPrepare
DTC_XaRollback
adsldpc
ADSIFreeColumn
ADSIGetColumn
ADSIGetFirstRow
ADSIGetNextColumnName
ADSIGetNextRow
ADSIGetObjectAttributes
ADSIGetPreviousRow
ADSIModifyRdn
msrating
RatingCustomInit
mtxclu
MtxCluIsClusterPresent
samlib
SamAddMemberToAlias
Sections
.text Size: 2KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 7KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE