a5462ebc51b4e3cee8e57ff06c11fae6a86029c95a8975fc5d4b8efc8f1f39dd
- SHA256 a5462ebc51b4e3cee8e57ff06c11fae6a86029c95a8975fc5d4b8efc8f1f39dd
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c55859f35ad07e3e4b13f45fa5fa4c788f7059daac930ea435600a936104c1b5.exe
Resource
win7-20240903-en
windows7-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
c55859f35ad07e3e4b13f45fa5fa4c788f7059daac930ea435600a936104c1b5.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
14 signatures
150 seconds
General
- Target a5462ebc51b4e3cee8e57ff06c11fae6a86029c95a8975fc5d4b8efc8f1f39dd
- Size 130KB
- Sample240906-w4ebzssale
- SHA256 a5462ebc51b4e3cee8e57ff06c11fae6a86029c95a8975fc5d4b8efc8f1f39dd
- MD5 2c61acab9839a77abeeb60700547bae2
- SHA1 cfe4cdde3818f2fe56cfb7e957d38eca62857b01
- SHA512 e639cfaf19bf319c9e2f4a1dde25aff1c2e43bcbc76dbb1f8936d90ad9e9add2b1e821824b06fc63ef75d1ab647cf3487cf02c57284f06819fa3c00acc6d757b
- SSDEEP 3072:lqARehLq8F9zaepUAXatF8fsPwZtryr23IOWNgOrCTLuN+t7q3vGEw6vl9:lZRQm8FBNXatmfsPwZtryC3JzqNB+Ewa
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c55859f35ad07e3e4b13f45fa5fa4c788f7059daac930ea435600a936104c1b5.exe
File Explorer
-
a5462ebc51b4e3cee8e57ff06c11fae6a86029c95a8975fc5d4b8efc8f1f39dd.zip 130KB
-
c55859f35ad07e3e4b13f45fa5fa4c788f7059daac930ea435600a936104c1b5.exe.exe 213KB
c55859f35ad07e3e4b13f45fa5fa4c788f7059daac930ea435600a936104c1b5.exe
- IMPHASH 4466917f30d072b6b108006d1bc57b5b
- SHA256 c55859f35ad07e3e4b13f45fa5fa4c788f7059daac930ea435600a936104c1b5
- MD5 8e456f932787fcd0cadbb598174575b2
- SHA1 22b069c76b86bdb6be8cdafc78019b55c583062e
- SHA512 cb26a33dacdcfe804bdd587ecd44b9bf1c59f357e8701fc4f5e1b04d8d8882466c7743fac51969fe8912e1197a5653986eb4a71edc35eee89051b6c98d546c9d
- SSDEEP 6144:MGDLD6Tj3Vyg0mwiRjaVlodEFjvn/Mq0Vdh1HQ:M+L2n3VygtzRWJjv+Vdz
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
6791
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
FillConsoleOutputCharacterA
GetConsoleAliasesLengthW
GetNumaProcessorNode
DebugActiveProcessStop
GetDefaultCommConfigW
CallNamedPipeA
WriteConsoleOutputW
HeapAlloc
InterlockedDecrement
GlobalSize
GetEnvironmentStringsW
CreateDirectoryW
GetComputerNameW
GetSystemDefaultLCID
GetModuleHandleW
GetCommandLineA
GetSystemTimes
GlobalAlloc
LoadLibraryW
GetConsoleAliasExesLengthW
SetConsoleMode
GetFileAttributesW
GetBinaryTypeA
GetStartupInfoW
SetConsoleTitleA
GetShortPathNameA
InterlockedExchange
GetLastError
GetProcAddress
CopyFileA
SetStdHandle
EnterCriticalSection
SearchPathA
BuildCommDCBW
GetNumaHighestNodeNumber
OpenWaitableTimerA
LoadLibraryA
UnhandledExceptionFilter
WritePrivateProfileStringA
QueryDosDeviceW
VirtualLock
FoldStringW
GetModuleFileNameA
FreeEnvironmentStringsW
FindAtomW
CopyFileExA
SetFilePointer
WriteConsoleW
EncodePointer
DecodePointer
MultiByteToWideChar
ExitProcess
GetCommandLineW
HeapSetInformation
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
LeaveCriticalSection
Sleep
HeapSize
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
RtlUnwind
HeapReAlloc
WideCharToMultiByte
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
IsProcessorFeaturePresent
ReadFile
CloseHandle
CreateFileW
user32
GetUserObjectInformationW
Name
.text
Size
102KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=25, id=171, productName=VS2010 build 30319, version=30319,
count=18, id=158, productName=VS2010 build 30319, version=30319,
count=101, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=112, id=1, productName=Unmarked objects,
count=1, id=175, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,