Static task
static1
Behavioral task
behavioral1
Sample
467d0310c31e1214054bb603c854e5ed7a3174402a6a4d2152131645a4d79a88.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
467d0310c31e1214054bb603c854e5ed7a3174402a6a4d2152131645a4d79a88.exe
Resource
win10v2004-20230915-en
General
-
Target
467d0310c31e1214054bb603c854e5ed7a3174402a6a4d2152131645a4d79a88
-
Size
52KB
-
MD5
1ace5a154a0690b9dd40362d9b39d871
-
SHA1
fe45fa7b2da861cefeedef2e6849fbe7a745ec27
-
SHA256
467d0310c31e1214054bb603c854e5ed7a3174402a6a4d2152131645a4d79a88
-
SHA512
ba649fa202fba5d4caf340af0efb84585fbd09a931ccc0349a84cb33f49d0060e5e2dd164291e8cc67f1077f8ea724597ba442ef8c672ab9a116628d9d043177
-
SSDEEP
768:PWbE6O2/N4zZ0TF24zBSklmfpJ3O2M81wr2pl/fq2A4nxaj9P:Pd6z/uzZ0TF24zxKMxrQl/fjACaj9P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 467d0310c31e1214054bb603c854e5ed7a3174402a6a4d2152131645a4d79a88
Files
-
467d0310c31e1214054bb603c854e5ed7a3174402a6a4d2152131645a4d79a88.exe windows:4 windows x86
dde4df95c13bac97bff353e6c465820f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetTimeFormatA
GetDateFormatA
GetComputerNameA
GlobalAlloc
LocalFree
GlobalLock
lstrcatA
lstrcpyA
DeviceIoControl
GlobalReAlloc
FormatMessageA
GetModuleHandleA
CreateFileA
GlobalFree
GlobalUnlock
GetLastError
ExitProcess
WriteFile
CloseHandle
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
user32
SetCursor
CharToOemA
wsprintfA
LoadCursorA
RegisterClassA
UnregisterClassA
LoadBitmapA
GetWindowDC
ReleaseDC
GetWindowTextA
SetDlgItemTextA
GetDlgItem
DispatchMessageA
GetSystemMenu
RemoveMenu
TranslateMessage
LoadStringA
EnableMenuItem
SendDlgItemMessageA
GetWindowRect
SetWindowPos
BeginPaint
EndPaint
PostQuitMessage
SetWindowTextA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
LoadAcceleratorsA
GetSystemMetrics
CreateDialogParamA
ShowWindow
GetMessageA
TranslateAcceleratorA
IsDialogMessageA
LoadIconA
MessageBoxA
DestroyWindow
DefDlgProcA
AppendMenuA
EnableWindow
gdi32
DeleteObject
DeleteDC
SelectObject
BitBlt
CreateCompatibleDC
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_initterm
__p___initenv
_XcptFilter
_exit
memcmp
strlen
memset
strncpy
memcpy
strstr
_itoa
vsprintf
printf
gmtime
strspn
strpbrk
strcmp
strcpy
strcat
sprintf
exit
_stricmp
atoi
wsock32
ntohl
ioctlsocket
WSAStartup
ord1001
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ