Static task
static1
Behavioral task
behavioral1
Sample
4503461777cdde6c311351bc0beb30f9c92e3157307eb90f6fbbe289c7b0fe11.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
4503461777cdde6c311351bc0beb30f9c92e3157307eb90f6fbbe289c7b0fe11.exe
Resource
win10v2004-20230703-en
General
-
Target
4503461777cdde6c311351bc0beb30f9c92e3157307eb90f6fbbe289c7b0fe11
-
Size
508KB
-
MD5
ce5c421ba4b434c4aa4017063863b97c
-
SHA1
a12113f4573eeae48b9e44195fa4cf26a08f6cc1
-
SHA256
4503461777cdde6c311351bc0beb30f9c92e3157307eb90f6fbbe289c7b0fe11
-
SHA512
7c9ca1532684495b0332c61094a740f17d89ed45f7e0e204232d60525104ff638e3d43a85375984660db42781a04e2e0694cfe518ac9a6820e7489f7080818dd
-
SSDEEP
12288:R2NUpFFGQfQw6Zx9se7XlY+MYodYvpSd83aInVeCIKGBscGlbSZbHYCu9o:wmpKQfQw6Zx9se7VY+MYiKSdWnVIKGBt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4503461777cdde6c311351bc0beb30f9c92e3157307eb90f6fbbe289c7b0fe11
Files
-
4503461777cdde6c311351bc0beb30f9c92e3157307eb90f6fbbe289c7b0fe11.exe windows x86
85c1978bffcdb8412337d4f28204783c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetFileInfoW
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetPathFromIDListW
SHGetMalloc
kernel32
CreateFileA
FreeLibrary
GetProcessHeap
HeapAlloc
GetLastError
GetProcAddress
HeapFree
LoadLibraryW
GetModuleFileNameW
LocalFree
WaitForSingleObject
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
CloseHandle
SetFileApisToOEM
GetCurrentThread
SetPriorityClass
GetEnvironmentVariableW
SetThreadPriority
GetCurrentProcess
GetModuleHandleW
GetVersionExW
CreateFileW
ExpandEnvironmentStringsW
GetCommandLineW
DeleteFileW
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
FindFirstFileW
FindClose
FindNextFileW
FormatMessageW
InterlockedExchangeAdd
SetEndOfFile
SetFileTime
WriteFile
SetFilePointer
GetFileSize
ReadFile
GetACP
MultiByteToWideChar
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetTempPathW
GetFullPathNameW
GetWindowsDirectoryW
GetTempFileNameW
SetFileAttributesW
GetLongPathNameW
MoveFileW
lstrlenW
CreateEventW
SetEvent
ResetEvent
FindResourceW
FileTimeToSystemTime
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
WideCharToMultiByte
WaitForMultipleObjects
ResumeThread
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetVersionExA
GetStartupInfoW
ExitThread
GetCurrentThreadId
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
user32
IsDialogMessageW
CreateDialogParamW
SetTimer
LoadIconW
ScreenToClient
TranslateMessage
IsWindowVisible
GetMessageW
PostQuitMessage
DestroyIcon
IsWindow
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
SetWindowPos
GetWindowRect
GetSystemMetrics
GetDlgItem
SendMessageW
EndDialog
SetFocus
GetWindowTextW
SetWindowTextW
DispatchMessageW
GetActiveWindow
GetDesktopWindow
LoadStringW
KillTimer
EnableWindow
gdi32
CreateSolidBrush
DeleteObject
ole32
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoInitialize
Sections
.text Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ