Static task
static1
Behavioral task
behavioral1
Sample
5fb92ecf0874d378388be85db3dee4ef3c67182bb519ee2615e7be495daa8048.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5fb92ecf0874d378388be85db3dee4ef3c67182bb519ee2615e7be495daa8048.exe
Resource
win10v2004-20231215-en
General
-
Target
5fb92ecf0874d378388be85db3dee4ef3c67182bb519ee2615e7be495daa8048
-
Size
37KB
-
MD5
75f22f52866d0df7245c3ba9e67b2ed3
-
SHA1
cc0ea5ae27fee646e3cd44fa3bccdf95a969357e
-
SHA256
5fb92ecf0874d378388be85db3dee4ef3c67182bb519ee2615e7be495daa8048
-
SHA512
dbd81d1f043dd3cbbb3a4a03d62665a34f96e93e167c77936ab2a3b456c013165ca4f03130e551210d9a274490df477b6b50855c8789fb2ed47e1b64d969149b
-
SSDEEP
768:A/E+UlejKbjWwKtUZS6KUAghE3c1ng8o6du:AC2tUZdHAMEyngBH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fb92ecf0874d378388be85db3dee4ef3c67182bb519ee2615e7be495daa8048
Files
-
5fb92ecf0874d378388be85db3dee4ef3c67182bb519ee2615e7be495daa8048.exe windows:4 windows x86 arch:x86
13169adaa55a4b4676c2eeddc904744e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
_controlfp
_except_handler3
__set_app_type
_XcptFilter
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
user32
PostQuitMessage
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
kernel32
lstrcpynA
GetFileType
CloseHandle
FindNextFileA
GetFileSize
DeleteFileA
FindFirstFileA
GetModuleHandleA
CreateFileA
GetStartupInfoA
GetLogicalDriveStringsA
GetEnvironmentStringsA
FindClose
GetModuleFileNameA
gdi32
CreateFontIndirectA
comctl32
ord17
shfolder
SHGetFolderPathA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ