Static task
static1
Behavioral task
behavioral1
Sample
5dbd95246d1c65df6f46863a305130f4d7def3e0f6d816ca6655e7f77c00e8d5.exe
Resource
win7-20241023-en
General
-
Target
5dbd95246d1c65df6f46863a305130f4d7def3e0f6d816ca6655e7f77c00e8d5.exe
-
Size
256KB
-
MD5
c0cf8566d6cb501c5a833c3272074149
-
SHA1
7ada7e7ba7fa21601f8fa796a244ca0edfb38f83
-
SHA256
5dbd95246d1c65df6f46863a305130f4d7def3e0f6d816ca6655e7f77c00e8d5
-
SHA512
51ddd15cfe3cb25c813806c4497d99b14b63d8b73bd4e7a2ba4ec862a8b4b38e034f6a3b3caca61d8a16e2a0bc6ded505e1fb61658c60e5e95f4820067d99f0b
-
SSDEEP
6144:KVQeVilAqaAKPmKmjHixTAiXLddsrTUqV2yp:KVUpKWkTvhqTUqV7p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dbd95246d1c65df6f46863a305130f4d7def3e0f6d816ca6655e7f77c00e8d5.exe
Files
-
5dbd95246d1c65df6f46863a305130f4d7def3e0f6d816ca6655e7f77c00e8d5.exe.exe windows:5 windows x86 arch:x86
722212d4ddaab5d571f7c47497af876a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileSectionA
WinExec
SetComputerNameW
ReadConsoleOutputAttribute
OpenFileMappingW
GetVolumeInformationW
GetStringTypeW
GetProcessTimes
GetFileSize
GetCurrencyFormatW
EnterCriticalSection
CreateFileA
ClearCommBreak
GetModuleHandleA
VirtualAlloc
user32
GetActiveWindow
GetCursor
GetDoubleClickTime
GetCapture
GetFocus
GetDesktopWindow
GetClipboardSequenceNumber
AnyPopup
CreateWindowStationW
FindWindowW
GetDlgItemTextW
GetQueueStatus
GrayStringA
LoadStringW
MessageBoxExW
SetMenuItemInfoW
EndMenu
GetClipboardViewer
GetInputState
GetClipboardOwner
GetCaretBlinkTime
CloseClipboard
GetDialogBaseUnits
CreatePopupMenu
GetForegroundWindow
CreateMenu
CharPrevA
CountClipboardFormats
gdi32
Escape
EnumMetaFile
DeleteMetaFile
CreatePatternBrush
CLIPOBJ_ppoGetPath
SwapBuffers
ExtSelectClipRgn
UnrealizeObject
SetMetaRgn
PathToRegion
RealizePalette
StrokePath
GetTextColor
GdiAddFontResourceW
SaveDC
GetClipBox
bInitSystemAndFontsDirectoriesW
UpdateICMRegKeyA
StartDocA
SetViewportOrgEx
SetRectRgn
SetColorAdjustment
SetBrushOrgEx
RemoveFontResourceA
PolyPolygon
PolyDraw
GetTextFaceA
GetMetaRgn
GetMetaFileBitsEx
GetGlyphOutlineA
GetDeviceGammaRamp
WidenPath
GetBrushOrgEx
GdiQueryTable
GdiPlayEMF
GdiPlayDCScript
GdiIsPlayMetafileDC
GdiEntry12
GdiCreateLocalMetaFilePict
GdiConvertPalette
GdiConsoleTextOut
UpdateColors
GetTextCharset
GdiArtificialDecrementDriver
advapi32
RegOpenKeyW
RegQueryValueExW
shell32
SHGetDiskFreeSpaceExW
DragAcceptFiles
DragQueryFileAorW
DragQueryPoint
ExtractIconA
SHAppBarMessage
SHBindToParent
SHCreateDirectoryExA
SHFileOperation
SHGetDataFromIDListW
SHGetDiskFreeSpaceA
SHGetIconOverlayIndexA
SHGetSpecialFolderPathW
SHInvokePrinterCommandW
SHIsFileAvailableOffline
SHLoadInProc
SHQueryRecycleBinA
ShellAboutW
ShellExecuteA
ShellExecuteEx
Shell_NotifyIcon
Shell_NotifyIconA
Shell_NotifyIconW
shlwapi
StrStrIA
StrStrA
StrRStrIW
StrRStrIA
StrRChrIW
StrCmpNW
StrCmpNIW
StrCmpNA
StrChrIW
StrChrIA
StrStrW
msvcrt
_XcptFilter
__getmainargs
__initenv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_wcsicmp
exit
wcschr
Sections
.text Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ