Static task
static1
Behavioral task
behavioral1
Sample
5c54c3306640920ab987c7c79a656bf4dc18ef412632fb634232de1f813eb414.exe
Resource
win7-20240220-en
General
-
Target
5c54c3306640920ab987c7c79a656bf4dc18ef412632fb634232de1f813eb414
-
Size
6.9MB
-
MD5
3cf61ddfdd5ec8048e83744a74c16d16
-
SHA1
cfbc0292441b72382cd94b819a52cd0f0d06d96e
-
SHA256
5c54c3306640920ab987c7c79a656bf4dc18ef412632fb634232de1f813eb414
-
SHA512
51651d46fa7a2ccd16b0366460c9bf21750a9632a564f83849ad05e178148dddf93d9ba100184a390c315eb9594801e18bdee1a188f817654123416b2539aeb6
-
SSDEEP
196608:X0MRaXglkJ0+4ydrZtaiDpAAJ5sULR+/a0+WFbf:E049drHRAAbzR+i0+Wxf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c54c3306640920ab987c7c79a656bf4dc18ef412632fb634232de1f813eb414
Files
-
5c54c3306640920ab987c7c79a656bf4dc18ef412632fb634232de1f813eb414.exe windows:4 windows x86 arch:x86
397865c786c4c8766a601cbd893174f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
comctl32
_TrackMouseEvent
Sections
.text Size: 1.2MB - Virtual size: 26.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE