Static task
static1
Behavioral task
behavioral1
Sample
439947b96431bef7691b759f22d4f5ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
439947b96431bef7691b759f22d4f5ad.exe
Resource
win10v2004-20231215-en
General
-
Target
439947b96431bef7691b759f22d4f5ad
-
Size
128KB
-
MD5
439947b96431bef7691b759f22d4f5ad
-
SHA1
af090640b1cf067ff5e846fdc7a5cbc165add5ef
-
SHA256
29c01120437b0efe67571a912bc6bb48b8268aa7c37daf87d80c138999fac171
-
SHA512
341cea3a5378b9b0020bb820e3ccdbd1e529b0c5bf48fb4b4f1a737663509b38053532e9e18b3bc5eb4bb70efff0189ee3e2e78ed4a2232c78b9555602cb61c2
-
SSDEEP
3072:jKmgM3hnAmJKIZ5KR0Yp0L1XbuEi//6qefxvUJo3GZq:GmuIZwiYp01qr//6PtGZq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 439947b96431bef7691b759f22d4f5ad
Files
-
439947b96431bef7691b759f22d4f5ad.exe windows:4 windows x86 arch:x86
8a29e9225dfd7e1ed6b0b2542fb3e06f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetFileAttributesExA
GetVersionExA
GetStartupInfoA
GetModuleHandleA
CreateFileA
CloseHandle
LoadLibraryA
GetLastError
GetProcAddress
Sleep
WinExec
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetSystemDirectoryA
SetFileTime
user32
ShowWindow
DefWindowProcA
GetMessageA
RegisterClassExA
PostQuitMessage
TranslateMessage
CreateWindowExA
DispatchMessageA
GetDesktopWindow
advapi32
LookupAccountNameA
OpenServiceA
StartServiceA
OpenSCManagerA
CloseServiceHandle
RegQueryValueExA
RegOpenKeyExA
CreateServiceA
ConvertSidToStringSidA
GetUserNameA
DeleteService
RegCloseKey
msvcrt
__getmainargs
_strlwr
_controlfp
__set_app_type
__p__fmode
sprintf
strstr
_access
rand
srand
time
_except_handler3
fclose
fflush
fwrite
fopen
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
_stricmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
shlwapi
SHDeleteKeyA
SHSetValueA
StrStrA
dbghelp
ImageNtHeader
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ