Static task
static1
Behavioral task
behavioral1
Sample
5c595657778f38dc37530b3428e54dcfac85fadf1aa512c5e457c60fc2868add.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5c595657778f38dc37530b3428e54dcfac85fadf1aa512c5e457c60fc2868add.exe
Resource
win10v2004-20240508-en
General
-
Target
5c595657778f38dc37530b3428e54dcfac85fadf1aa512c5e457c60fc2868add
-
Size
1.3MB
-
MD5
94eb938771378bdbe2cd10b03ee50bfd
-
SHA1
7f54ed42e6dc5d62de1805405498a1a6eb89830b
-
SHA256
5c595657778f38dc37530b3428e54dcfac85fadf1aa512c5e457c60fc2868add
-
SHA512
c5bfb91cb843a94755c5b61998cc2ef234c1a7acbaa2d57317c0f367fadfb6d03b594ad6572e644766b8cf1fd1e8eb18ab60b6f022fc1e84de58598c195e26fa
-
SSDEEP
24576:kShOF1VRMO/rv+E8w8qPdaAOrY+90MGVkHkexGSkSurb2XBQJ4MvWN8dV3VfG:XhMRMGmERVPdlOrY+90MZk6u+Q0eVFfG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c595657778f38dc37530b3428e54dcfac85fadf1aa512c5e457c60fc2868add
Files
-
5c595657778f38dc37530b3428e54dcfac85fadf1aa512c5e457c60fc2868add.exe windows:5 windows x86 arch:x86
40e12a453bb46a5668f2b903e2794bc6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
IsChild
advapi32
ControlService
Sections
Size: - Virtual size: 1.1MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE