Static task
static1
Behavioral task
behavioral1
Sample
5b58b58c106ac8f57bdf15bcaddad790N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b58b58c106ac8f57bdf15bcaddad790N.exe
Resource
win10v2004-20240709-en
General
-
Target
5b58b58c106ac8f57bdf15bcaddad790N.exe
-
Size
3.6MB
-
MD5
5b58b58c106ac8f57bdf15bcaddad790
-
SHA1
4b5a6c71c23fbab03b7af87f9186c871efa0d8bb
-
SHA256
8903c327604091175d8d2feb6e2da182af55c7607df6d87ec1060e4dc9a13d0e
-
SHA512
c841d817c1f8cfeff0de4b94d609ed79b83649557aa40631d13af4cbbb117f3972452ab68f597793c82981d29642aee51fcc52e388c7108f0fc6f107fae8af22
-
SSDEEP
49152:UqIFCg1e1GjpKpYKzvtZKqGR9vBN9D+BAEoyXUryf61UlMX:uChuo7vt1CTbJNX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b58b58c106ac8f57bdf15bcaddad790N.exe
Files
-
5b58b58c106ac8f57bdf15bcaddad790N.exe.exe windows:4 windows x86 arch:x86
9b1b3dc3091af30c79c990a1e581ba14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatus
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
QueryPerformanceCounter
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WriteConsoleW
WriteFile
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthread
_cexit
_errno
_fmode
_initterm
_iob
_lock
_onexit
_unlock
_wfopen
abort
calloc
exit
fclose
ferror
fprintf
fread
free
fseek
ftell
fwrite
malloc
memcpy
setlocale
signal
strlen
strncmp
vfprintf
winmm
timeBeginPeriod
timeEndPeriod
ws2_32
WSAGetOverlappedResult
pdf2imgapi
Pdf2ImgClose
Pdf2ImgCloseImage
Pdf2ImgCreateImageW
Pdf2ImgCreateObject
Pdf2ImgDestroyObject
Pdf2ImgGetErrorCode
Pdf2ImgGetErrorMessageW
Pdf2ImgGetLicenseIsValid
Pdf2ImgGetPageCount
Pdf2ImgInitialize
Pdf2ImgOpenW
Pdf2ImgRenderPage
Pdf2ImgSetDPI
Pdf2ImgSetImageQuality
Pdf2ImgSetLicenseKeyW
pdftoolboxapi
PdfCheckLicense
PdfClose
PdfDocumentCopyMetadata
PdfDocumentCopyPage
PdfDocumentCreatePage
PdfDocumentCreateW
PdfDocumentGetMetadata
PdfDocumentGetPages
PdfDocumentOpenW
PdfDocumentSetMetadata
PdfGetLastErrorMessageW
PdfInitialize
PdfMetadataSetProducerW
PdfPageListAppend
PdfPageListGet
PdfPageListGetCount
PdfPageRotate
PdfSetLicenseKeyW
pdfoptimizeapi
PdfOptimizeClose
PdfOptimizeCreateObject
PdfOptimizeGetErrorCode
PdfOptimizeGetLicenseIsValid
PdfOptimizeInitialize
PdfOptimizeOpenW
PdfOptimizeSaveAsW
PdfOptimizeSetBitonalCompressions
PdfOptimizeSetBitonalResolutionDPI
PdfOptimizeSetBitonalThresholdDPI
PdfOptimizeSetClipImages
PdfOptimizeSetColorResolutionDPI
PdfOptimizeSetColorThresholdDPI
PdfOptimizeSetContinuousCompressions
PdfOptimizeSetConvertToCFF
PdfOptimizeSetImageQuality
PdfOptimizeSetLicenseKeyW
PdfOptimizeSetMergeEmbeddedFonts
PdfOptimizeSetMonochromeResolutionDPI
PdfOptimizeSetMonochromeThresholdDPI
PdfOptimizeSetOptimizeResources
PdfOptimizeSetRemoveRedundantObjects
PdfOptimizeSetStrip
PdfOptimizeSetSubsetFonts
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 86KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE