Static task
static1
Behavioral task
behavioral1
Sample
5dcb456a45e9e9a9d4503269849f10b76fbfd26756c55d6983eae801f38eefbb.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5dcb456a45e9e9a9d4503269849f10b76fbfd26756c55d6983eae801f38eefbb.exe
Resource
win10v2004-20240508-en
General
-
Target
5dcb456a45e9e9a9d4503269849f10b76fbfd26756c55d6983eae801f38eefbb
-
Size
29KB
-
MD5
3d3c5b02f8c6d22cdc52c74b810011a8
-
SHA1
3e1f9f94f7f4fff3c772e62db75357104a3d5943
-
SHA256
5dcb456a45e9e9a9d4503269849f10b76fbfd26756c55d6983eae801f38eefbb
-
SHA512
de4a65b7349b27f8557588082e85571096f3cf63436af18fa635a37ab055f40656087156f8b674d6d6c37dd48d810297d12581a6241d1dc11a61fa9dc416e305
-
SSDEEP
768:PVEHJqjHyGvwFylDpulVSQJrE/2QmlCYZUT3v1VwOxfrfk7:PH2nylslwHCCLBPr8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dcb456a45e9e9a9d4503269849f10b76fbfd26756c55d6983eae801f38eefbb
Files
-
5dcb456a45e9e9a9d4503269849f10b76fbfd26756c55d6983eae801f38eefbb.exe windows:4 windows x86 arch:x86
b6a7a0b5eccbdba136f6870043afb913
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
mfc42
ord3749
msvcrt
_except_handler3
user32
FindWindowA
advapi32
RegSetValueExA
shell32
ShellExecuteA
ws2_32
gethostbyname
wininet
HttpSendRequestA
Sections
��� Size: 21KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEC Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE