Static task
static1
Behavioral task
behavioral1
Sample
53a606bb5e8dc257cbef6d09cd580e85dfb8b8dd820d233e50d716cd6e499ef4.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
53a606bb5e8dc257cbef6d09cd580e85dfb8b8dd820d233e50d716cd6e499ef4.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral3
Sample
53a606bb5e8dc257cbef6d09cd580e85dfb8b8dd820d233e50d716cd6e499ef4.exe
Resource
win11-20241007-en
General
-
Target
53a606bb5e8dc257cbef6d09cd580e85dfb8b8dd820d233e50d716cd6e499ef4
-
Size
280KB
-
MD5
fd27ff32b21ab4b2b42a89356b75dd77
-
SHA1
84bde6eecb609108fb93bd3fe63f060f3cf5d592
-
SHA256
53a606bb5e8dc257cbef6d09cd580e85dfb8b8dd820d233e50d716cd6e499ef4
-
SHA512
843d81e315085e8e78f7240e1227c31c354641eb2f32833fbead53f9860dce728fc5c66dfa3cda233a77beffd3549d8b088ddc6f5c0773c4cf426ff1fd381674
-
SSDEEP
6144:/5Ok16o3vLNXMMqmbccld5b2IOIQlNtGZknCko7Xs2sek:/yozqMi8w2sek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53a606bb5e8dc257cbef6d09cd580e85dfb8b8dd820d233e50d716cd6e499ef4
Files
-
53a606bb5e8dc257cbef6d09cd580e85dfb8b8dd820d233e50d716cd6e499ef4.exe windows:4 windows x86 arch:x86
b4cdfb0f74c2da3a5a0531cfa2dbb537
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
ReadFile
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetLocaleInfoW
CompareStringA
CompareStringW
ExitProcess
GetModuleHandleA
VirtualFree
IsBadCodePtr
IsBadReadPtr
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
SetUnhandledExceptionFilter
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
GetFileType
GetStdHandle
SetHandleCount
VirtualAlloc
OutputDebugStringA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
RtlUnwind
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
RaiseException
FatalAppExitA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetEnvironmentVariableA
user32
GetDlgCtrlID
ReleaseDC
GetDC
GetClientRect
GetDlgItem
EndDialog
SendMessageA
ShowWindow
DialogBoxParamA
LoadIconA
MessageBoxA
gdi32
CreateSolidBrush
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
winmm
mixerGetLineControlsA
mixerClose
mixerSetControlDetails
mciGetErrorStringA
mixerGetLineInfoA
mixerOpen
waveOutSetVolume
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInClose
waveInUnprepareHeader
waveInReset
waveOutGetVolume
mixerGetControlDetailsA
comctl32
ord17
Sections
.text Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ