Static task
static1
Behavioral task
behavioral1
Sample
4a7ae326ba3dd4744b18cb34f93ae438.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4a7ae326ba3dd4744b18cb34f93ae438.exe
Resource
win10v2004-20231215-en
General
-
Target
4a7ae326ba3dd4744b18cb34f93ae438
-
Size
3.3MB
-
MD5
4a7ae326ba3dd4744b18cb34f93ae438
-
SHA1
699f780a9358f6bd515bf0b06525478a52196ca4
-
SHA256
3f7d93385d117ec32e7212f46c93f4e7a2fb048170fc41d7bb9408286b05a8c8
-
SHA512
12eb4bfbb2def72add2fe839ceaa8bc48952a3eedd033cd3780237418db878bdcd7ceee280813a2e0cb21d28c0f84eaf05ca0d0f5f29de87fc4c658d3058d29c
-
SSDEEP
49152:zaiiOdzvUriuhlI0iQ4YQfKyidblSfB5xYsSW4NqP6ldAqopYIf1qm9c2ian:VzvUriujI0nHj1lAjsNE6WpE0yan
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a7ae326ba3dd4744b18cb34f93ae438
Files
-
4a7ae326ba3dd4744b18cb34f93ae438.exe windows:4 windows x86 arch:x86
8c3664a43d2b023f90b174ad474b53bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
kernel32
FindFirstFileA
CloseHandle
FindNextFileA
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
DeleteFileA
SetFileTime
GetFullPathNameA
lstrcmpiA
SetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetEnvironmentVariableA
CopyFileA
ExpandEnvironmentStringsA
lstrcpynA
GlobalFree
lstrcatA
MoveFileA
GetCommandLineA
WaitForSingleObject
GetVersion
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
GetCurrentProcess
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
GetWindowsDirectoryA
GetTempPathA
SetFilePointer
FindClose
GetExitCodeProcess
MulDiv
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetUserDefaultLangID
GetDiskFreeSpaceA
GetTickCount
ExitProcess
user32
SetWindowTextA
DestroyWindow
CreateDialogParamA
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetFocus
GetWindowLongA
SetClassLongA
IsWindowEnabled
SetWindowPos
LoadCursorA
SetCursor
GetDlgItemTextA
MapWindowPoints
GetMessagePos
LoadBitmapA
CallWindowProcA
CloseClipboard
SetClipboardData
EmptyClipboard
SetForegroundWindow
SetTimer
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
MessageBoxA
CharNextA
wsprintfA
CharPrevA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
GetSysColor
SetWindowLongA
LoadImageA
EnableWindow
PeekMessageA
DispatchMessageA
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
GetWindowTextA
DrawTextA
EndPaint
OpenClipboard
ShowWindow
TrackPopupMenu
PostQuitMessage
ExitWindowsEx
GetDC
gdi32
CreateFontA
DeleteObject
CreateFontIndirectA
GetDeviceCaps
CreateBrushIndirect
SetBkColor
SetBkMode
SetTextColor
SelectObject
CreateSolidBrush
advapi32
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA
RegEnumValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHFileOperationA
SHGetMalloc
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ