Static task
static1
Behavioral task
behavioral1
Sample
5ead7c94982171010b3df1a485a03069d2986fcde13ed8b60175c59840f1607a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5ead7c94982171010b3df1a485a03069d2986fcde13ed8b60175c59840f1607a.exe
Resource
win10v2004-20241007-en
General
-
Target
5ead7c94982171010b3df1a485a03069d2986fcde13ed8b60175c59840f1607a.exe
-
Size
282KB
-
MD5
0e560da43934d4d2da7e1a7da5ebfd2d
-
SHA1
d1af6e0d9901a8f3dbbc1dee3c571331f6eb2333
-
SHA256
5ead7c94982171010b3df1a485a03069d2986fcde13ed8b60175c59840f1607a
-
SHA512
9853ae076f5ee2cb0845d544753db3faa32ddaa134aedef27d132c35e71520703777fd8f01c13ffe3b04be2948c0662e7f037f108f360879830fe8a5f6c4a858
-
SSDEEP
6144:OLukrrarV55qNTMA4LBf0dJ5TTBZbspom7bXG:hkr055qNTQN0VTTbM/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ead7c94982171010b3df1a485a03069d2986fcde13ed8b60175c59840f1607a.exe
Files
-
5ead7c94982171010b3df1a485a03069d2986fcde13ed8b60175c59840f1607a.exe.exe windows:4 windows x86 arch:x86
7b374fbbc30f64eae2c88e5699283a53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetComputerNameA
FindResourceW
GetModuleHandleA
lstrlenA
CreateFileW
GetCurrentDirectoryA
CloseHandle
SetLastError
CreateProcessA
LocalFree
HeapCreate
Sleep
lstrcpyA
PulseEvent
UnmapViewOfFile
LoadLibraryW
GetCurrentThreadId
GlobalUnlock
FindClose
user32
CallWindowProcA
SetFocus
DrawEdge
GetDlgItem
DrawMenuBar
FillRect
CreateWindowExA
GetDC
CreateIcon
GetCaretPos
CheckRadioButton
IsWindow
DispatchMessageA
cryptui
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll
CryptUIDlgSelectCA
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mxukewd Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE