Static task
static1
Behavioral task
behavioral1
Sample
40488e4432d342201649c7899661b936.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
40488e4432d342201649c7899661b936.exe
Resource
win10v2004-20231215-en
General
-
Target
40488e4432d342201649c7899661b936
-
Size
45KB
-
MD5
40488e4432d342201649c7899661b936
-
SHA1
bccebe60c3fa009f3f0b95995b75603b445db498
-
SHA256
59c2d04062dcaa8994c16a68de0bbe219c2aa776973c132bb30c741e9ea20ded
-
SHA512
7fc431ed765752d1423c864623fa24023071fe44489b6d3743ef6bb503bcb41abc05e17c4af4d85e33ed4fda2cc7f57e451360c51e45b97ef7ec08750e31fba9
-
SSDEEP
768:jWumNR9sMmHT6m1d2PI0JoiqtaRNNKVURGYwlFhdzNIKbv7DlABT:jWTqRHl110aptaR2yRCLhdzNI+vk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40488e4432d342201649c7899661b936
Files
-
40488e4432d342201649c7899661b936.exe windows:4 windows x86 arch:x86
d372a169e66c062332d74406c32cfcb8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
OpenProcess
TerminateProcess
GetProcAddress
GetModuleHandleA
GetOEMCP
SetHandleCount
SetStdHandle
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
CloseHandle
GetCPInfo
GetACP
FlushFileBuffers
SetFilePointer
GetFileType
GetStdHandle
HeapCreate
WriteFile
LCMapStringA
LCMapStringW
HeapFree
HeapAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLastError
user32
MessageBoxA
GetFocus
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE