Static task
static1
Behavioral task
behavioral1
Sample
5b290bd792fe1029a7f6c6d8f29642a0N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b290bd792fe1029a7f6c6d8f29642a0N.dll
Resource
win10v2004-20240709-en
General
-
Target
5b290bd792fe1029a7f6c6d8f29642a0N.exe
-
Size
2.2MB
-
MD5
5b290bd792fe1029a7f6c6d8f29642a0
-
SHA1
dd11808c74e918069d43e529aff28cb7b29bb4d3
-
SHA256
41c67a77260bb54f618d38ee9b36589d8eecff052d29753b0c92cda6540bd920
-
SHA512
f673aeed3c5529c4007df50521b12ae025b88e77ee48465118c712cde5190c5f2630e4a1340751596bf42fdfeab5feb7eda340e7365722f1b04c39e326432afe
-
SSDEEP
49152:FOh1r+FmMfAPgOPgSxSrsVbgrjmu3aWw1TMnUmbnbpL:FQU5f++SxMwbgrj93aWGT2bbpL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b290bd792fe1029a7f6c6d8f29642a0N.exe
Files
-
5b290bd792fe1029a7f6c6d8f29642a0N.exe.dll windows:5 windows x86 arch:x86
e984b8f7dd9751310a7a9468022ea038
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrChrIA
advapi32
RegOverridePredefKey
CloseServiceHandle
AllocateLocallyUniqueId
RegGetKeySecurity
kernel32
OutputDebugStringA
FillConsoleOutputAttribute
SetConsoleTextAttribute
GetStringTypeW
LockFile
GetThreadLocale
LockFileEx
SetThreadExecutionState
SetUnhandledExceptionFilter
GetBinaryTypeW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
GetModuleFileNameW
HeapCreate
IsDebuggerPresent
ole32
CoCancelCall
user32
AdjustWindowRect
InvalidateRgn
DrawIconEx
CreatePopupMenu
GetUpdateRgn
ScreenToClient
CreateIconIndirect
gdi32
BeginPath
ResizePalette
StartPage
GetNearestPaletteIndex
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EXP Size: 4KB - Virtual size: 39B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 832KB - Virtual size: 829KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ