Static task
static1
Behavioral task
behavioral1
Sample
47d4931664a2ac5d81e113b8a6e5482cc15556dbac056abf0ab7233a842aaf1f.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
47d4931664a2ac5d81e113b8a6e5482cc15556dbac056abf0ab7233a842aaf1f.exe
Resource
win10v2004-20230703-en
General
-
Target
47d4931664a2ac5d81e113b8a6e5482cc15556dbac056abf0ab7233a842aaf1f
-
Size
52KB
-
MD5
eb21385fd7bf4b9736ec608369268e43
-
SHA1
8fceebd536832db39e89dd704eebf35085990090
-
SHA256
47d4931664a2ac5d81e113b8a6e5482cc15556dbac056abf0ab7233a842aaf1f
-
SHA512
b6636e078be3fe6682c3115173ac462dcb637272cede12f1c995a6c881bf58b742c0ba1227fb2e4026340df65fae50eaab13bc54a8391fd219bc7522e71f8557
-
SSDEEP
768:P6uA69v28RuUH7zsSgOfmOYpu4BkGqwQAM/De1D1GXZcCB:P6uAouUH7zFg2mObyg17
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47d4931664a2ac5d81e113b8a6e5482cc15556dbac056abf0ab7233a842aaf1f
Files
-
47d4931664a2ac5d81e113b8a6e5482cc15556dbac056abf0ab7233a842aaf1f.exe windows x86
c9f7d501c980cfb7048c528a20a3c327
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
Sleep
CreateThread
GetPrivateProfileIntA
GetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
lstrcmpA
FreeLibrary
user32
GetDlgItemTextA
EndDialog
GetForegroundWindow
MoveWindow
GetDlgItem
GetWindowLongA
SetWindowPos
EnumChildWindows
ClipCursor
SetDlgItemTextA
GetCursorPos
GetDC
SendMessageA
FindWindowA
GetDesktopWindow
GetWindow
GetClassNameA
GetWindowTextA
wsprintfA
DialogBoxParamA
gdi32
GetPixel
ole32
CoInitialize
mfc42
ord2864
ord537
ord2915
ord2818
ord540
ord4033
ord2141
ord800
ord434
ord5575
msvcrt
_onexit
__dllonexit
atoi
printf
atol
__CxxFrameHandler
_exit
_XcptFilter
_itoa
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs
comctl32
ord17
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ