Static task
static1
Behavioral task
behavioral1
Sample
4014275d7098dfee104852b649079d6b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4014275d7098dfee104852b649079d6b.exe
Resource
win10v2004-20231215-en
General
-
Target
4014275d7098dfee104852b649079d6b
-
Size
144KB
-
MD5
4014275d7098dfee104852b649079d6b
-
SHA1
c4064a96e06291704a3992400a66e1431c79c874
-
SHA256
8188390299709d53e91f71c0ca9b93e3ffb92f568a3f429ffa8bae2f6fe1dce4
-
SHA512
847ef101574120a661dab516747f1f71c8d5098960e467d7ba23cb90f523b81d6f98590caec1d57b759ddb349857ce168659ba8495ace76fbf025a47411a50ba
-
SSDEEP
3072:J4LL644vxoHxwu3jMhc0GOj7z1pjCwYgAPNI:n44vxE3jMh0w7zrCwYg6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4014275d7098dfee104852b649079d6b
Files
-
4014275d7098dfee104852b649079d6b.exe windows:4 windows x86 arch:x86
a166196f57d7e0e9af6d6290913a2566
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateStreamOnHGlobal
CoCreateGuid
CLSIDFromString
CoGetObjectContext
CreateBindCtx
CoUnmarshalInterface
CoTaskMemFree
CoGetContextToken
OleRun
user32
GetWindowLongA
GetKeyboardLayoutNameA
GetWindowDC
GetLastActivePopup
GetScrollRange
GetKeyboardLayout
GetMessagePos
GetIconInfo
GetScrollInfo
GetMenuState
GetKeyState
GetMenuItemID
GetMenuItemInfoA
GetMenuItemCount
GetMenuStringA
GetWindowLongW
GetSysColor
GetKeyboardLayoutList
GetTopWindow
GetSystemMenu
GetScrollPos
GetPropA
GetKeyboardState
GetKeyNameTextA
GetSubMenu
GetKeyboardType
GetMenu
GetSysColorBrush
GetParent
GetWindow
kernel32
GetModuleHandleA
GetACP
IsBadReadPtr
GetLastError
GetCommandLineA
LoadLibraryA
GetModuleHandleW
VirtualAllocEx
GetProcAddress
ExitProcess
GetVersionExA
LoadLibraryExA
GetOEMCP
Sections
CODE Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 826B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ