Static task
static1
Behavioral task
behavioral1
Sample
4a8b60e2592df64105a8fae29233339f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4a8b60e2592df64105a8fae29233339f.exe
Resource
win10v2004-20231215-en
General
-
Target
4a8b60e2592df64105a8fae29233339f
-
Size
8.5MB
-
MD5
4a8b60e2592df64105a8fae29233339f
-
SHA1
acd19490c8c65a8d46e6155eba595ff74ef7a026
-
SHA256
39e8a41ba948d2d9d8fcf0a251d3700e04ad18e83aee30eb6a4f53acbf40080a
-
SHA512
7f32ebaa48ea34960b48558d6b8a4dc27a69c632a4daa5c995fe197846b3e4d7bda79b4ec8f1b319dd4e2613c1316567e76506e946234ad903f11568a4f43345
-
SSDEEP
196608:+V9Tp+oZidNkvGiqpE4Aaclk7Z9VVHl/+B5oQ8zLhT5TbrdV:+V9t+oZid2vGCGZXJR+B518zLhhL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a8b60e2592df64105a8fae29233339f
Files
-
4a8b60e2592df64105a8fae29233339f.exe windows:5 windows x86 arch:x86
9b3fdd212d49b03b17f323d80bf68822
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
kernel32
CreateThread
FindResourceW
CreateDirectoryW
ReadFile
GetFileSize
WriteFile
DeleteFileW
GetTempFileNameW
GetTempPathW
FreeResource
LockResource
SizeofResource
LoadResource
SetFilePointer
GetProcAddress
CreateProcessW
GetSystemDirectoryW
GetSystemTime
FindResourceA
OutputDebugStringW
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GlobalAddAtomW
GetThreadLocale
GetStringTypeW
GetStringTypeA
CreateWaitableTimerW
MultiByteToWideChar
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapSize
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
ExitThread
SetWaitableTimer
QueueUserAPC
ReleaseMutex
SetDllDirectoryW
GetModuleHandleW
GetCommandLineW
RemoveDirectoryW
WaitForSingleObject
GetExitCodeProcess
SetThreadLocale
GetCurrentProcess
LocalAlloc
LocalFree
GetVersionExA
MoveFileExW
CreateFileW
GetModuleFileNameW
GetEnvironmentVariableW
ExitProcess
FreeLibrary
LoadLibraryW
CloseHandle
CreateMutexW
GetLastError
LCMapStringW
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
user32
SetWindowLongW
DrawTextW
ClientToScreen
SetRect
SetPropW
GetParent
CallWindowProcW
MapWindowPoints
GetPropW
RegisterClassExW
CreateWindowExW
SetForegroundWindow
SetTimer
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
GetForegroundWindow
EndPaint
BeginPaint
GetKeyState
LoadCursorW
SetCursor
InvalidateRect
ReleaseCapture
SetCapture
GetClientRect
GetWindowRect
MoveWindow
GetDC
ReleaseDC
PostQuitMessage
PostMessageW
FillRect
ShowWindow
SetWindowTextW
DestroyWindow
GetWindow
GetWindowLongW
SetWindowPos
LoadStringW
gdi32
GetTextExtentExPointW
SetTextColor
SetBkMode
CreateFontA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
StretchBlt
DeleteObject
CreateDIBSection
CreateSolidBrush
advapi32
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ControlService
OpenSCManagerW
OpenServiceW
CloseServiceHandle
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
shell32
ShellExecuteExW
ord680
ShellExecuteW
SHGetFolderPathW
ole32
StringFromGUID2
CoCreateGuid
oleaut32
SysAllocString
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9.0MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ