Static task
static1
Behavioral task
behavioral1
Sample
5a3198eebffee9aab430cec96dc2abd0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a3198eebffee9aab430cec96dc2abd0N.exe
Resource
win10v2004-20240802-en
General
-
Target
5a3198eebffee9aab430cec96dc2abd0N.exe
-
Size
238KB
-
MD5
5a3198eebffee9aab430cec96dc2abd0
-
SHA1
3977850afb8b9feebc167190eb91b1b9d5c57b96
-
SHA256
dd3d9dbe34fde02c08e28eaddc93289e3dc46060d2c1fecef54c7e4cbc4a2545
-
SHA512
f68b6631860946e27ab865c933583f9dc3781294ab5219f7d7b1822a26987628518d592dcb42a6aeed6beb6ad54d29e443a3ed7f4acbac96a701a85c2f46fa50
-
SSDEEP
3072:g3hPh9V+rc95gLYa6i61NaJizqD0XxBMR/OyXQKlwqyMOvvbWwfXF/fiREQc+Ovb:lUGp54FXI8yAKlPmbWw/hf6EQc+OT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a3198eebffee9aab430cec96dc2abd0N.exe
Files
-
5a3198eebffee9aab430cec96dc2abd0N.exe.exe windows:5 windows x86 arch:x86
33d06ca86221e833fc481a9e9088e226
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hccutils
LoadICON
InitializeKeyHook
FindResources
LoadSTRINGFromHKCU
LoadSTRING
kernel32
GetProcAddress
GetModuleHandleA
CreateProcessA
FreeLibrary
LoadLibraryA
CloseHandle
GetLastError
InterlockedDecrement
SearchPathA
CompareFileTime
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
lstrcmpiA
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetWindowsDirectoryA
Sleep
CreateMutexA
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetCurrentProcessId
SetLastError
SetFilePointer
FlushFileBuffers
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
WriteFile
HeapCreate
HeapReAlloc
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
VirtualAlloc
LocalFree
TerminateProcess
VirtualFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetUserDefaultUILanguage
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
IsDebuggerPresent
user32
PostThreadMessageA
SendMessageA
UnregisterClassA
wsprintfA
CharNextW
GetCursorPos
EnumDisplaySettingsA
IsWindow
MessageBoxA
CallWindowProcA
GetWindowLongA
RegisterClassExA
UnregisterHotKey
RegisterHotKey
ActivateKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
GetKeyboardLayout
GetKeyboardLayoutList
LoadCursorA
GetClassInfoExA
SetWindowLongA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
PeekMessageA
SetWindowTextA
CreateDialogParamA
ShowWindow
PostQuitMessage
DefWindowProcA
DestroyWindow
GetDlgItem
GetDesktopWindow
GetWindowRect
CharNextA
advapi32
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteExA
ole32
CoCreateInstance
CoRevokeClassObject
CoTaskMemRealloc
CoSuspendClassObjects
CoTaskMemAlloc
CoRegisterClassObject
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoInitialize
oleaut32
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysStringLen
SysAllocString
SysFreeString
VariantClear
LoadTypeLi
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE