Static task
static1
Behavioral task
behavioral1
Sample
4fd7411cc681154e27eede4332a010641db743700099c602f5ac1e61968c3264.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4fd7411cc681154e27eede4332a010641db743700099c602f5ac1e61968c3264.exe
Resource
win10v2004-20230220-en
General
-
Target
4fd7411cc681154e27eede4332a010641db743700099c602f5ac1e61968c3264
-
Size
1.2MB
-
MD5
e258139aea32394aab6c5853108c05a2
-
SHA1
f1c4ff50d75f06c23bfcc651c2b2e3894eaa13a4
-
SHA256
4fd7411cc681154e27eede4332a010641db743700099c602f5ac1e61968c3264
-
SHA512
30eecf774e899aa3cbef1d1b993e1e8dd573b9d481823c61fa2f1c8c1711dade67b9c7e45fa2963d3bade62fef14d35277ab6bd6bda2c7a72463a6b4fa2874b7
-
SSDEEP
12288:zMiCtvE0khFSii4uukYOWo2yIRIdebFe6s0kc0f3mGKJi7Xja/q5kC:zMUMWo2yIRIeFm0b0f3mJY7XjrN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fd7411cc681154e27eede4332a010641db743700099c602f5ac1e61968c3264
Files
-
4fd7411cc681154e27eede4332a010641db743700099c602f5ac1e61968c3264.exe windows x86
065892c10ab6d2b7cb3bb70f065537fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
CreateFileW
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
HeapDestroy
VirtualAlloc
VirtualProtect
Sleep
FreeConsole
DecodePointer
EncodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteConsoleW
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetCommandLineW
GetACP
HeapAlloc
HeapValidate
GetSystemInfo
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetCurrentThread
OutputDebugStringA
OutputDebugStringW
CloseHandle
WaitForSingleObjectEx
CreateThread
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
SetConsoleCtrlHandler
RaiseException
user32
MessageBoxA
SetCursor
LoadCursorW
SendMessageW
SetWindowPos
GetWindowRect
GetDlgItem
GetClassNameW
MapWindowPoints
DestroyWindow
Sections
.text Size: 572KB - Virtual size: 571KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 521KB - Virtual size: 526KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 1024B - Virtual size: 990B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ