Static task
static1
Behavioral task
behavioral1
Sample
f5d8ad0f132f2a6ef8f9b1e3a682601e38ea3c43d10f19941bfdcd11c98e3154.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f5d8ad0f132f2a6ef8f9b1e3a682601e38ea3c43d10f19941bfdcd11c98e3154.exe
Resource
win10v2004-20240508-en
General
-
Target
f5d8ad0f132f2a6ef8f9b1e3a682601e38ea3c43d10f19941bfdcd11c98e3154
-
Size
20KB
-
MD5
13ac5e3e9ba0f046834d244ac177f299
-
SHA1
cf339c23f46e3f78f61aaa82da85127aba412392
-
SHA256
f5d8ad0f132f2a6ef8f9b1e3a682601e38ea3c43d10f19941bfdcd11c98e3154
-
SHA512
76efc8d41da416d3deea9ea6d7e3e68768b9fa07e65f487e1d671f20eafdd902fa168c1ee901ef2eb05ddaedd4a1fde25900cdba4a6b069a8dc9a605defd0e5d
-
SSDEEP
384:NAGiTFb+hIGuR6PDOblhaiHeDxA9iiX1nTasKQBwl4U:NopKh3kk9APasKawl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d8ad0f132f2a6ef8f9b1e3a682601e38ea3c43d10f19941bfdcd11c98e3154
Files
-
f5d8ad0f132f2a6ef8f9b1e3a682601e38ea3c43d10f19941bfdcd11c98e3154.exe windows:4 windows x86 arch:x86
b4f92b7004c8fc55a83cb63480e2f7f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__argv
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_access
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
atoi
calloc
exit
fclose
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getenv
malloc
memcpy
printf
putchar
puts
rewind
signal
strcat
strchr
strcmp
strlen
strncmp
vfprintf
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE