Static task
static1
Behavioral task
behavioral1
Sample
5803cc88387af5aabaf56672a45e0070N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5803cc88387af5aabaf56672a45e0070N.exe
Resource
win10v2004-20240709-en
General
-
Target
5803cc88387af5aabaf56672a45e0070N.exe
-
Size
433KB
-
MD5
5803cc88387af5aabaf56672a45e0070
-
SHA1
768f43fd35bf356d867e0fa218345075af7336a0
-
SHA256
3b79bba5faa5ceadc81ef6c725461acf6b55d85b0aa57c0f746079510da48fa1
-
SHA512
27448e2b19083d84a48b54b6d6e41bd32d474e6b7010ed0fd670622346edaeb4e8050e5542ac3203df06fbacfeebae1f4a7cdeaff75db3ad302019a20198a039
-
SSDEEP
12288:svYTng2Zj+9FySHf0FAKslvwWprLN31veObo:sv/k60FzeoMrLK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5803cc88387af5aabaf56672a45e0070N.exe
Files
-
5803cc88387af5aabaf56672a45e0070N.exe.exe windows:4 windows x86 arch:x86
9dac79384d87c12a1527d003b5561c97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugBreak
GetLocaleInfoA
SetWaitableTimer
GetPrivateProfileSectionW
GetCurrentThread
SetThreadIdealProcessor
HeapAlloc
OutputDebugStringW
IsValidCodePage
WriteConsoleW
LCMapStringW
SetUnhandledExceptionFilter
lstrlenA
EnumSystemLocalesA
SetStdHandle
IsDebuggerPresent
SetHandleCount
GetEnvironmentStringsW
GetFileType
WriteConsoleA
InterlockedDecrement
FreeLibrary
GetLastError
GetACP
ConvertDefaultLocale
GetOEMCP
LCMapStringA
GetEnvironmentStrings
GetProcAddress
CloseHandle
GetDateFormatA
MultiByteToWideChar
GetDiskFreeSpaceExA
FreeEnvironmentStringsW
lstrlen
GetProcessHeap
VirtualQuery
GetVersionExA
LoadLibraryW
HeapValidate
EnterCriticalSection
GetStartupInfoW
IsValidLocale
GetConsoleOutputCP
HeapReAlloc
GetUserDefaultLCID
ExitProcess
FindNextFileA
TlsFree
VirtualAlloc
OutputDebugStringA
QueryPerformanceCounter
GetCurrentProcess
GetStringTypeW
GetModuleHandleA
GetCommandLineW
GetStdHandle
GetStringTypeA
WideCharToMultiByte
InitializeCriticalSection
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetConsoleCP
TlsSetValue
SetLastError
VirtualFree
FlushFileBuffers
CreateSemaphoreA
GetTickCount
GetModuleFileNameW
UnhandledExceptionFilter
GetCommandLineA
InterlockedIncrement
HeapDestroy
RtlUnwind
GetCPInfo
GetSystemTimeAsFileTime
WriteFile
GetTimeZoneInformation
CompareStringW
CompareStringA
GetConsoleMode
SetFilePointer
GetLocaleInfoW
GetStartupInfoA
HeapFree
TerminateProcess
LoadLibraryA
lstrcmpiW
LeaveCriticalSection
TlsAlloc
DeleteCriticalSection
GetModuleFileNameA
IsBadReadPtr
FindFirstFileW
SetConsoleCtrlHandler
RaiseException
InterlockedExchange
GetCurrentProcessId
CreateFileA
GetTimeFormatA
GetCurrentThreadId
GetThreadPriority
HeapCreate
TlsGetValue
FreeLibraryAndExitThread
advapi32
CryptEnumProvidersA
RegQueryInfoKeyW
LookupSecurityDescriptorPartsW
RegQueryMultipleValuesA
CryptEnumProvidersW
RegCreateKeyExA
GetUserNameA
LookupPrivilegeDisplayNameA
RegOpenKeyExW
RegEnumKeyExW
CryptGetHashParam
InitiateSystemShutdownW
RegCloseKey
CryptDestroyKey
LookupAccountSidA
RegEnumKeyW
RegQueryValueW
comdlg32
FindTextA
ReplaceTextW
GetFileTitleA
GetFileTitleW
gdi32
GetNearestPaletteIndex
AddFontResourceA
ColorMatchToTarget
GetEnhMetaFileDescriptionW
StretchDIBits
GetOutlineTextMetricsA
GetCharWidth32A
EnumICMProfilesW
Chord
GdiGetBatchLimit
ScaleWindowExtEx
ExcludeClipRect
ExtTextOutW
SwapBuffers
AbortPath
OffsetRgn
GetGlyphOutlineA
RestoreDC
GetMetaFileA
GetCharacterPlacementA
SetICMMode
Sections
.text Size: 273KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ