Static task
static1
Behavioral task
behavioral1
Sample
435b46ab44dd171221796f6be15deea1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
435b46ab44dd171221796f6be15deea1.exe
Resource
win10v2004-20231215-en
General
-
Target
435b46ab44dd171221796f6be15deea1
-
Size
522KB
-
MD5
435b46ab44dd171221796f6be15deea1
-
SHA1
098390b731500a9360846629dfbb626dca3813e8
-
SHA256
28ac4762dc3c0b5a84a1ec235c751ae2f50a2d9414253c07edc0752a7bf4c5f0
-
SHA512
049d5ea5def39b8e5ad13fee33123df1d3bf46374f25f35006683ba1ac1b1b7c9f92e0dba3e332c0cb4848034ecbda1aadb338e75360d245eb0cc32e69de1279
-
SSDEEP
12288:Rw79cDmz/TYtSrFeBDlwkYJ93f5e1QD5s6gMInAIM:R6cDmzcOeZlm9vhDJpsVM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 435b46ab44dd171221796f6be15deea1
Files
-
435b46ab44dd171221796f6be15deea1.exe windows:4 windows x86 arch:x86
a5dc068b71637efdcde449c7f4b3111e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
DrawStatusTextW
CreateStatusWindowW
ImageList_GetImageInfo
ImageList_Merge
CreateMappedBitmap
ImageList_AddIcon
ImageList_GetIconSize
InitCommonControlsEx
ImageList_DrawEx
DrawStatusText
ImageList_SetImageCount
CreateStatusWindowA
ImageList_Draw
ImageList_Add
ImageList_LoadImageW
CreateStatusWindow
ImageList_Create
ImageList_DragMove
ImageList_BeginDrag
ImageList_DragLeave
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_SetBkColor
advapi32
RegOpenKeyExW
GetUserNameW
ReportEventW
DuplicateToken
RegConnectRegistryW
RegSetKeySecurity
CryptSetProviderExA
RegSetValueW
LookupPrivilegeNameA
RegOpenKeyW
CryptAcquireContextW
CryptCreateHash
RegQueryMultipleValuesW
GetUserNameA
kernel32
GetOEMCP
QueryPerformanceCounter
CreateFileA
CompareStringW
RtlUnwind
GetUserDefaultLCID
GetConsoleMode
SetLastError
FreeLibrary
WideCharToMultiByte
InterlockedDecrement
VirtualAlloc
HeapSize
GetVersionExA
WriteFile
GetStringTypeW
HeapCreate
EnterCriticalSection
SetFilePointer
GetConsoleCP
GetTimeFormatA
GetLocaleInfoA
GetACP
DeleteAtom
VirtualQuery
FlushFileBuffers
GetStringTypeExA
GetCurrentThreadId
GetEnvironmentStringsW
GetStringTypeA
GetCurrentThread
HeapFree
WriteConsoleW
GetProcAddress
EnumSystemLocalesA
HeapReAlloc
VirtualFree
SetStdHandle
OpenMutexA
ReadFile
GetConsoleOutputCP
CreateRemoteThread
SetUnhandledExceptionFilter
TlsAlloc
GetCurrentProcessId
SetHandleCount
DeleteCriticalSection
GetDateFormatA
LCMapStringW
SetConsoleCtrlHandler
GetModuleFileNameA
CompareStringA
MultiByteToWideChar
CreateEventW
GetCPInfo
IsValidCodePage
GetCurrentProcess
InterlockedIncrement
GetTickCount
LeaveCriticalSection
InitializeCriticalSection
CreateMutexA
GetModuleHandleA
FreeEnvironmentStringsA
InterlockedExchange
GetFileType
TerminateProcess
WriteConsoleA
IsDebuggerPresent
TlsGetValue
HeapDestroy
LoadLibraryA
Sleep
GetStartupInfoA
GetEnvironmentStrings
GetCommandLineA
IsValidLocale
SetEnvironmentVariableA
ExitProcess
GetTimeZoneInformation
GetStdHandle
OpenFileMappingA
TlsFree
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
LCMapStringA
HeapAlloc
GetLocaleInfoW
GetLastError
CloseHandle
TlsSetValue
GetProcessHeap
EnumTimeFormatsA
UnhandledExceptionFilter
comdlg32
LoadAlterBitmap
ReplaceTextW
user32
LookupIconIdFromDirectoryEx
DefWindowProcA
RegisterClassExA
RegisterClassA
GetKeyNameTextW
MapVirtualKeyA
OemToCharW
WindowFromDC
SetWindowLongA
UnloadKeyboardLayout
LoadBitmapW
CallNextHookEx
RemoveMenu
EnumPropsExW
SetMenu
ChildWindowFromPointEx
DeleteMenu
DdeCmpStringHandles
GetCursor
DdeSetUserHandle
GetClientRect
GetWindow
MessageBoxW
DestroyWindow
DdeFreeStringHandle
CreateWindowExW
DialogBoxParamW
SwapMouseButton
ClientToScreen
ShowWindow
Sections
.text Size: 343KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ