Static task
static1
Behavioral task
behavioral1
Sample
4687dc66f6282f7b5bba232bd59296d9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4687dc66f6282f7b5bba232bd59296d9.exe
Resource
win10v2004-20231215-en
General
-
Target
4687dc66f6282f7b5bba232bd59296d9
-
Size
22KB
-
MD5
4687dc66f6282f7b5bba232bd59296d9
-
SHA1
63b3def4f981fdec2aa63e07d48c0772361b166b
-
SHA256
35d386dd135de76557966daa03170fb080850656db0551a999ba3d6cf4e3d0b6
-
SHA512
4cbd4fb61cc23ece875759fcc138604811cc9687136dfcc3ee7b19fd5a6ba180de55ccae455c4a36fa375130480cd0dbe11ef57668cbd23d5e7c71650d803a8b
-
SSDEEP
192:U0ygnlLh8Zb96tTiZYOsfl5+aLfpsal+NHNNEDO6PKOAkJOVn8LkTOdKGj1QvOR8:RyglLOvzY3f9Lft+mC6VNwUKq7EPdGi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4687dc66f6282f7b5bba232bd59296d9
Files
-
4687dc66f6282f7b5bba232bd59296d9.exe windows:5 windows x86 arch:x86
eac915292482dd85cf27be84c2c7ddaf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
ExitThread
GetCommandLineA
GetCommandLineW
FindClose
GetFileTime
WaitForMultipleObjects
GetDriveTypeA
MapViewOfFile
CancelIo
EnterCriticalSection
GetCurrentDirectoryW
GetFileType
GetModuleFileNameA
HeapFree
lstrlenA
GetFileAttributesA
WriteFile
HeapCreate
CloseHandle
FindVolumeClose
GetModuleHandleA
SetFileAttributesW
FindVolumeClose
LocalSize
uxtheme
GetThemeColor
DrawThemeEdge
GetWindowTheme
CloseThemeData
OpenThemeData
DrawThemeBackground
GetThemeEnumValue
GetThemeTextMetrics
GetThemeBool
CloseThemeData
GetThemeTextExtent
SetWindowTheme
IsThemeActive
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE