Static task
static1
Behavioral task
behavioral1
Sample
4ae30d18e2139d96f1f98d950ab22350.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4ae30d18e2139d96f1f98d950ab22350.exe
Resource
win10v2004-20231215-en
General
-
Target
4ae30d18e2139d96f1f98d950ab22350
-
Size
126KB
-
MD5
4ae30d18e2139d96f1f98d950ab22350
-
SHA1
dd9b022bb761378b27efdae6e8ccfade5db778a2
-
SHA256
e3417b88f66a80b1d97cd397917517f3b92c7ed4089532b2cc47a5bf168b9b6e
-
SHA512
9e95e145cd00abe228cb6eec3e20f0246eddfe0b6cce9254eafce8ae80f52b42486e411292046bf48e538a42d7b69e1e586fa089ab4dd2b84f3ef6e9216df818
-
SSDEEP
3072:+XjlQmGLKtk0mNeZ8MVhV0l45cgd6vhB6fPGiPHJ:+X5QmbtxP0l4ipyPH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ae30d18e2139d96f1f98d950ab22350
Files
-
4ae30d18e2139d96f1f98d950ab22350.exe windows:4 windows x86 arch:x86
384da91758ce25f223a5822d7c43c0a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
GetUserNameA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
kernel32
CloseHandle
CreateFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetEnvironmentVariableA
GetModuleHandleA
GetProcAddress
GetProcessTimes
GetStdHandle
GetSystemTime
GetSystemTimeAdjustment
GetThreadTimes
GetTickCount
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
LoadLibraryA
QueryPerformanceCounter
ReadFile
SetConsoleMode
SetUnhandledExceptionFilter
WriteFile
msvcrt
_strdup
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_isctype
_onexit
_pctype
_setmode
_vsnprintf
abort
atexit
atoi
exit
fclose
fflush
fgetc
fgets
fopen
fprintf
fputc
fread
free
fwrite
getenv
malloc
memcpy
memmove
memset
putchar
puts
realloc
remove
signal
sprintf
sscanf
strchr
strcmp
strcpy
strcspn
strlen
strncpy
strtol
strtoul
ungetc
user32
GetCapture
GetClipboardOwner
GetCursorPos
GetForegroundWindow
GetQueueStatus
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE