Static task
static1
Behavioral task
behavioral1
Sample
046efc731ce3de5d79e6c3b5bbb11e6e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
046efc731ce3de5d79e6c3b5bbb11e6e.exe
Resource
win10v2004-20231215-en
General
-
Target
046efc731ce3de5d79e6c3b5bbb11e6e
-
Size
88KB
-
MD5
046efc731ce3de5d79e6c3b5bbb11e6e
-
SHA1
f82fd8d00f31b74a2e3ba8811776863763668738
-
SHA256
649bd274c724c225cbd7bb3edd239e71e6c7edfe6d10b419ed4b4e71810d83a1
-
SHA512
6b2d2bda22714423fd6a8c098d9a75f9138afb69a9fa0e0cad311a03198cf8ef684d01f3df92ba18c0b8090734b208ea66f2b93ff8cef18cc7db6c5418b59a8a
-
SSDEEP
1536:JhLEVnSFpr0rba5klFSUxu0u0mWZNtFplGUCXYmzONPYRq8wsvhQ2/5cupFK:JhwS0rwuFBHeXWhWq8wspQ2yuX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 046efc731ce3de5d79e6c3b5bbb11e6e
Files
-
046efc731ce3de5d79e6c3b5bbb11e6e.exe windows:4 windows x86 arch:x86
fd99f8b70ca573c0f0d76f91fa9731e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetBinaryTypeW
FindNextFileA
GetComputerNameW
DeleteFileA
FreeConsole
CreateDirectoryA
GetLastError
GetFileTime
GetFileSize
GetExitCodeProcess
FindNextFileW
DeleteFileW
GetACP
GlobalFree
GetCommandLineA
GetOEMCP
GetConsoleMode
GetBinaryTypeA
GetVersion
GetFileSize
GetCommandLineA
GetLastError
FindNextFileA
DeleteFileA
CreateDirectoryA
GetComputerNameA
FreeConsole
GetConsoleCP
OpenFile
GetConsoleOutputCP
GetStdHandle
GetBinaryTypeW
GetProcessHeap
FindNextFileW
GlobalFree
DeleteFileW
GetComputerNameA
FindNextFileA
DeleteFileW
GetExitCodeProcess
GetConsoleOutputCP
GetExitCodeThread
FreeConsole
GetProcessHeap
GlobalFree
GetACP
OpenFile
GetConsoleMode
GetComputerNameW
FindNextFileA
GetComputerNameA
GetConsoleCP
GetBinaryTypeW
GetVersion
GetFileSize
GetACP
GetConsoleMode
GetCommandLineA
FindFirstFileW
GetComputerNameW
GetExitCodeProcess
GlobalFree
GetOEMCP
GetStdHandle
user32
AppendMenuA
DialogBoxParamA
GetDlgItem
DrawTextW
CopyImage
GetCursor
IsMenu
DrawIcon
InsertMenuA
AppendMenuW
GetDC
AlignRects
GetWindowTextLengthA
DrawIconEx
AppendMenuA
CloseWindow
GetCursor
LoadMenuA
LoadCursorA
DialogBoxParamW
IsWindow
DrawIcon
InsertMenuA
CopyImage
DialogBoxParamA
AlignRects
BlockInput
GetDC
InsertMenuA
DialogBoxParamA
DrawTextW
DrawTextA
GetCursor
BlockInput
CreateIcon
DrawIconEx
IsWindow
LoadCursorA
DrawIcon
Sections
.itext Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 47KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 711B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ