Static task
static1
Behavioral task
behavioral1
Sample
4870d2d44c5f6d544ff0e59658512c35.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4870d2d44c5f6d544ff0e59658512c35.exe
Resource
win10v2004-20231215-en
General
-
Target
4870d2d44c5f6d544ff0e59658512c35
-
Size
166KB
-
MD5
4870d2d44c5f6d544ff0e59658512c35
-
SHA1
e761948c6b23f148f59696ed2dce06bd78bc4ddb
-
SHA256
e0ee52077d7c5db1dd2a69419ebc4bf34e58bd6c1350a2d90b169fe91e4f0108
-
SHA512
cf5e446d144f15ee2af242626d6e0754637d0c6d55e11d089abb2838a6880d4c6bce3cd0b0832acefb1a7ed10e4faa975ffa8401747804f05bb578476b2e5b0a
-
SSDEEP
3072:UP+ZuW0+1/hn6udKlnKk9s/BaJ9Hmfv2YozauOn23Oel:UOe+1va7If+Yozauv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4870d2d44c5f6d544ff0e59658512c35
Files
-
4870d2d44c5f6d544ff0e59658512c35.exe windows:5 windows x86 arch:x86
3c2c0aa1a8e202cb0133dc810e7968ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
CharNextA
GetParent
GetSystemMetrics
TranslateMessage
GetDC
gdi32
PatBlt
SetStretchBltMode
GetPixel
GetDeviceCaps
DeleteDC
CreateFontIndirectA
RestoreDC
SelectObject
RectVisible
GetClipBox
CreatePen
SelectPalette
CreateCompatibleDC
DeleteObject
SaveDC
LineTo
SetMapMode
CreateSolidBrush
SetTextAlign
GetTextMetricsA
GetStockObject
SetTextColor
CreatePalette
GetObjectA
kernel32
GetOEMCP
GetCurrentThread
GlobalFindAtomA
MulDiv
DeleteFileW
lstrlenA
GetProcessHeap
lstrcmpiA
GetCommandLineW
SetCurrentDirectoryA
GetModuleHandleW
GetThreadLocale
GlobalFindAtomW
RemoveDirectoryA
lstrcmpA
GetTickCount
GetConsoleOutputCP
GetCurrentThreadId
CopyFileA
IsDebuggerPresent
GetUserDefaultLangID
DeleteFileA
lstrcmpiW
GetACP
GetWindowsDirectoryA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcessId
lstrlenW
VirtualAlloc
VirtualFree
QueryPerformanceCounter
GetCurrentProcess
GetDriveTypeA
GetCommandLineA
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Aowc, Ag Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Uouhifjg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ