Static task
static1
Behavioral task
behavioral1
Sample
5bc51fd4f0d0ff303097f4d8516f4323289db86de9c36158a4bcf8d38bcfd778.exe
Resource
win10v2004-20240508-en
General
-
Target
5bc51fd4f0d0ff303097f4d8516f4323289db86de9c36158a4bcf8d38bcfd778
-
Size
330KB
-
MD5
ce13f0778f5fbbe5a368c41d7bf50a5e
-
SHA1
71a36287c669616505c87122e70db287be3d40d1
-
SHA256
5bc51fd4f0d0ff303097f4d8516f4323289db86de9c36158a4bcf8d38bcfd778
-
SHA512
d88cac0911f894a151916c82d979e50359536a2d3d3bb6cecd7ad99a2475b09f5dd209bb44e248dc7e081f0b17a3f687d7ae3aa67a32e4542e83280c69df48be
-
SSDEEP
3072:R2YA0irBPruaYNZpuSqxw3VTn3+6QFaWOxgqLcXxcpcOIb5wDEl5vBIguvt6lGBD:Zir9efrq+3RnxecpcOf4pBI3+GBXndF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bc51fd4f0d0ff303097f4d8516f4323289db86de9c36158a4bcf8d38bcfd778
Files
-
5bc51fd4f0d0ff303097f4d8516f4323289db86de9c36158a4bcf8d38bcfd778.exe windows:5 windows x86 arch:x86
e4aaa56bbc1bd0826da74ffb34068c8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
SetLastError
ReadProcessMemory
_lopen
OpenEventA
LoadLibraryW
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleA
GetSystemDirectoryW
CreateDirectoryW
SetFileAttributesW
GetVolumeInformationW
LocalAlloc
BuildCommDCBA
SetComputerNameA
SetInformationJobObject
FindNextVolumeMountPointW
GetOEMCP
GetCalendarInfoA
GetNumberFormatA
GetStringTypeA
SetConsoleCursorInfo
SetConsoleWindowInfo
AddConsoleAliasW
ReadConsoleW
ReadFile
SetEndOfFile
WriteConsoleW
IsBadStringPtrW
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
IsDebuggerPresent
GetCurrentThreadId
GetStdHandle
GetFileType
GetModuleFileNameA
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
HeapReAlloc
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
CreateFileW
CloseHandle
SetStdHandle
user32
GetSysColorBrush
GetMenu
DdeKeepStringHandle
advapi32
ClearEventLogA
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 36.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ