Static task
static1
Behavioral task
behavioral1
Sample
b5a598554dc46f5de68d9f762cdbd087154fb43a36ecc3a04f2900b346247ced.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5a598554dc46f5de68d9f762cdbd087154fb43a36ecc3a04f2900b346247ced.exe
Resource
win10v2004-20240508-en
General
-
Target
b5a598554dc46f5de68d9f762cdbd087154fb43a36ecc3a04f2900b346247ced
-
Size
5.6MB
-
MD5
b4c69fe205a6bf27fef09dc2f6c453e9
-
SHA1
b69c4f4e1b166e03c762ff75c47a518bc41fdb06
-
SHA256
b5a598554dc46f5de68d9f762cdbd087154fb43a36ecc3a04f2900b346247ced
-
SHA512
9d3ad14f627fca9143b0801baaf646b95a7e087d7d9887e782d359d91df1af7ba72395148bec50b17d4333c2d08f32b0f062530f4fdba2b35a57011c9eac1447
-
SSDEEP
98304:aTZGZN4RDXdSPbGl1bgqwVDUsr0VICo2R20P7vadsSiBxjQzMhqPfZkiMp:5ZESgbgq+USXI20zSsS2xwMMZw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5a598554dc46f5de68d9f762cdbd087154fb43a36ecc3a04f2900b346247ced
Files
-
b5a598554dc46f5de68d9f762cdbd087154fb43a36ecc3a04f2900b346247ced.exe windows:4 windows x86 arch:x86
9f0d440d5d027996737684484584a590
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
VirtualProtect
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateFileA
CreateFileW
WriteFile
CloseHandle
GetLocalTime
VirtualQuery
CreateFileMappingW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
GetSystemInfo
VirtualProtectEx
GetFileSize
GetProfileStringA
LoadLibraryA
user32
wsprintfA
PeekMessageA
shlwapi
ord158
winmm
midiStreamOut
ws2_32
WSACleanup
gdi32
Escape
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 220KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 368KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ