Static task
static1
Behavioral task
behavioral1
Sample
4719cefe46b1314a57f187fa38a58f85fd130c56d1075298ab664a8dab0955a2.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
4719cefe46b1314a57f187fa38a58f85fd130c56d1075298ab664a8dab0955a2.exe
Resource
win10v2004-20231023-en
General
-
Target
4719cefe46b1314a57f187fa38a58f85fd130c56d1075298ab664a8dab0955a2
-
Size
38KB
-
MD5
bbf756d1945ea08451a78c94f6e03513
-
SHA1
f6e91566a9caf5ed75107bd2888c898e097723b5
-
SHA256
4719cefe46b1314a57f187fa38a58f85fd130c56d1075298ab664a8dab0955a2
-
SHA512
05325728b67f61a48e8ef5ab7eda6e42f6b817af75614fc955ed31662e9acfa33911af04c3a550a4106ae9a42b6936cbe73822026edf2ec199456322223f11c9
-
SSDEEP
768:Ni5mioI1nuXPGhwYJ8TZJsaKXmjhNkNEdIn5JqG:NqoI1nuXP+yzs7XmjhCNDqG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4719cefe46b1314a57f187fa38a58f85fd130c56d1075298ab664a8dab0955a2
Files
-
4719cefe46b1314a57f187fa38a58f85fd130c56d1075298ab664a8dab0955a2.exe windows:4 windows x64 arch:x64
c5745ecbec548224e93b6ed0c59ea071
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetLastError
ReadFile
CloseHandle
CreateFileW
GetStdHandle
ExitProcess
GetCommandLineW
GetConsoleScreenBufferInfo
WriteFile
WriteConsoleW
SetConsoleTextAttribute
OutputDebugStringW
GetConsoleMode
GetModuleHandleW
GetProcAddress
GetCurrentProcess
FormatMessageW
LocalFree
SetLastError
GetFileAttributesW
GetFileSize
HeapAlloc
GetProcessHeap
HeapFree
GetVersion
GetCurrentDirectoryW
GetModuleFileNameW
GetEnvironmentVariableW
FindClose
GetSystemDirectoryW
WideCharToMultiByte
FindFirstFileW
GetFileTime
GetFileInformationByHandle
FindNextFileW
WaitForSingleObject
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ