Static task
static1
Behavioral task
behavioral1
Sample
5fc3ae443c3cf1fefbe3bd995cfce9e52fea04e47374a7d277ef99e62a3f251e.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5fc3ae443c3cf1fefbe3bd995cfce9e52fea04e47374a7d277ef99e62a3f251e.exe
Resource
win10v2004-20240412-en
General
-
Target
5fc3ae443c3cf1fefbe3bd995cfce9e52fea04e47374a7d277ef99e62a3f251e
-
Size
37KB
-
MD5
3dcabfae0b5845532fa83bc9bfa6e9e5
-
SHA1
f77c2bcd1e0e0fbca88ad140bdad75f85562e502
-
SHA256
5fc3ae443c3cf1fefbe3bd995cfce9e52fea04e47374a7d277ef99e62a3f251e
-
SHA512
06b8c1e392f0d6677b0fc789d7ee247c25599e038e6f42e086baf7237f80dd354b1b1bba3570e1ba88e98819934e85bcc66f9d85e740cef46799f15b1828476d
-
SSDEEP
384:sqYbtpudE4HPEBvm9TDxLRrAf4yX+Jg7yy7qEUml+s1vj0buxLG4iJSJga:abHwEawQJNAfJ7XNNcQvYun+SJg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fc3ae443c3cf1fefbe3bd995cfce9e52fea04e47374a7d277ef99e62a3f251e
Files
-
5fc3ae443c3cf1fefbe3bd995cfce9e52fea04e47374a7d277ef99e62a3f251e.exe windows:4 windows x86 arch:x86
5de74daed652444e25bb823b139269d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetLastError
CreateProcessA
CloseHandle
GetEnvironmentStringsW
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
WaitForSingleObject
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetProcAddress
LoadLibraryA
SetEndOfFile
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
advapi32
RegOpenKeyExA
RegQueryValueExA
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ