Static task
static1
Behavioral task
behavioral1
Sample
4acd460f1fac26be35c7e74bfee416e0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4acd460f1fac26be35c7e74bfee416e0.exe
Resource
win10v2004-20231215-en
General
-
Target
4acd460f1fac26be35c7e74bfee416e0
-
Size
94KB
-
MD5
4acd460f1fac26be35c7e74bfee416e0
-
SHA1
b3dd799f7715aae1c24623d28ea102d37abb1c9b
-
SHA256
27c2e407a4ade6852edf44efd9afa89d51c6b7901fa58bb5cbc32a6f02a7a9cd
-
SHA512
28365cc52dbfa9eec3b2cb5b40d2f9fb6aa4ce6839918c1df5527a2b2bd5da0db8a3ff9592f97324f581f9ddc09aaba0cc1a25ecfc24f7444ad9613e60dea845
-
SSDEEP
1536:nN+sI7sgghkA9QaLwv07VMdHTASmc8yeTcQb6mj8p+hFWBw:NI7sxhkA9Zr+WSWfb6mjI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4acd460f1fac26be35c7e74bfee416e0
Files
-
4acd460f1fac26be35c7e74bfee416e0.exe windows:5 windows x86 arch:x86
4c9945ef9af10de0003a045003182777
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
__p__fmode
printf
_initterm
_acmdln
strcmp
_adjust_fdiv
__setusermatherr
atexit
calloc
_iob
__p__commode
free
__getmainargs
fread
_XcptFilter
__set_app_type
fprintf
_exit
atoi
exit
kernel32
GetModuleHandleW
GetTickCount
GetProcAddress
MultiByteToWideChar
SetThreadLocale
VirtualProtectEx
SetFileTime
WritePrivateProfileStringA
LoadLibraryExW
comctl32
InitCommonControls
CreateStatusWindowA
InitializeFlatSB
ImageList_Create
ImageList_DragEnter
shell32
SHAppBarMessage
SHGetMalloc
DragQueryFile
user32
IsZoomed
GetClientRect
InflateRect
GetPropA
CreateMenu
FindWindowA
InsertMenuItemA
GetWindowLongA
FillRect
gdi32
CreateCompatibleBitmap
DeleteMetaFile
DeleteEnhMetaFile
SetTextJustification
ole32
CoDisconnectObject
OleDraw
CoInitialize
CoTaskMemAlloc
advapi32
GetUserNameA
RegEnumValueW
oleaut32
SafeArrayCreate
SafeArrayPutElement
SysAllocStringByteLen
GetErrorInfo
SysStringByteLen
SysReAllocStringLen
CreateErrorInfo
GetActiveObject
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ