_cgo_dummy_export
Static task
static1
Behavioral task
behavioral1
Sample
5923e0c059ff66e30bdcb1b721f043b0a302c502f165bdf9ab03f8874d0c9042.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5923e0c059ff66e30bdcb1b721f043b0a302c502f165bdf9ab03f8874d0c9042.exe
Resource
win10v2004-20241007-en
General
-
Target
5923e0c059ff66e30bdcb1b721f043b0a302c502f165bdf9ab03f8874d0c9042
-
Size
4.0MB
-
MD5
61b0f4f7a822424474f2ea1b364558cd
-
SHA1
7aa312f9857e686076e7eca5136af29f3d9f00a0
-
SHA256
5923e0c059ff66e30bdcb1b721f043b0a302c502f165bdf9ab03f8874d0c9042
-
SHA512
e77dcd8462d431525f0f81879475b811e2cee3ce751763744df051e49138ca9ff2d11717b233194cda723f6324b611a1642bbc145b55b241e7d3c24e9acfdaa0
-
SSDEEP
49152:lKKfHPZ6IVMv76K8ocsCGzzJ7UDv7zuBcLAqw1Gjg+A2deCMmwV/IJu2mWG2mrk:l/fh6ImzzJoDfuBcMv+A7wXA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5923e0c059ff66e30bdcb1b721f043b0a302c502f165bdf9ab03f8874d0c9042
Files
-
5923e0c059ff66e30bdcb1b721f043b0a302c502f165bdf9ab03f8874d0c9042.exe windows:6 windows x86 arch:x86
12a30b523ac71a3cbe9145c89400dd7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GlobalAlloc
SetFilePointer
ReadFile
GlobalFree
WriteFile
GetFileSize
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
CloseHandle
SetFileTime
GetFileTime
CreateFileA
FindFirstFileA
GetDriveTypeA
FreeLibrary
ReleaseMutex
ResumeThread
SetThreadPriority
GetLastError
WaitForSingleObject
CreateMutexA
CreateThread
GetCommandLineA
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
GetWindowsDirectoryA
GetModuleFileNameA
GetStringTypeW
FlushFileBuffers
RtlUnwind
GetVersion
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
user32
MessageBoxA
Exports
Exports
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 109KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE