Static task
static1
Behavioral task
behavioral1
Sample
5db0e4c22869b3ce2ce7cb92f3cd1a80N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5db0e4c22869b3ce2ce7cb92f3cd1a80N.exe
Resource
win10v2004-20240709-en
General
-
Target
5db0e4c22869b3ce2ce7cb92f3cd1a80N.exe
-
Size
229KB
-
MD5
5db0e4c22869b3ce2ce7cb92f3cd1a80
-
SHA1
572330029147af79a913e53ab318b81d4eb30b30
-
SHA256
319952464ccc9d545f82eb33d01a08d94ab9752d5dd6395737992c65c470c055
-
SHA512
88859229ab0d2d670ba8888ddda3db9063956d703b45f950e9568600222b6009a3949b4bff2de24f80ea54d26b9024146f5fb31308acf13deb9525026d5db2f0
-
SSDEEP
3072:DgWNYQUccYccpUGXMWHLowk9qYgDjhM8YQEkJAhFN8ViPTOwIjegKKS3cnbmAUJN:rNYQo3chk0bMUE/hoM0Kb0b3UJ9Ri9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5db0e4c22869b3ce2ce7cb92f3cd1a80N.exe
Files
-
5db0e4c22869b3ce2ce7cb92f3cd1a80N.exe.exe windows:4 windows x86 arch:x86
6d9c10f27dd476e2e741c999c4f50fd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
LCMapStringA
SetLastError
GetLastError
GetProcAddress
GetStringTypeW
HeapReAlloc
TlsFree
GetOEMCP
UnhandledExceptionFilter
GetCurrentProcessId
HeapAlloc
GetCommandLineA
LCMapStringW
VirtualFree
GetModuleHandleA
GetACP
HeapDestroy
EnterCriticalSection
InterlockedExchange
SetHandleCount
GetEnvironmentStrings
GetStdHandle
MultiByteToWideChar
GetFileType
GetCPInfo
TlsGetValue
FreeEnvironmentStringsW
FileTimeToLocalFileTime
ExitProcess
GetTickCount
FreeEnvironmentStringsA
WriteConsoleOutputAttribute
HeapFree
HeapCreate
GetModuleFileNameA
WriteFile
LoadLibraryA
QueryPerformanceCounter
GetVersion
VirtualAlloc
CreateFileA
GetStartupInfoA
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
InitializeCriticalSection
LeaveCriticalSection
TlsAlloc
TlsSetValue
DeleteCriticalSection
GetCurrentThread
GetStringTypeA
GetSystemTimeAsFileTime
IsBadWritePtr
GetEnvironmentStringsW
lstrcmpW
gdi32
EnumFontFamiliesExA
GetKerningPairs
GetPixelFormat
GetCurrentPositionEx
SelectClipRgn
GetICMProfileA
CreateFontW
LineTo
PlayEnhMetaFileRecord
ScaleWindowExtEx
TranslateCharsetInfo
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ