Static task
static1
Behavioral task
behavioral1
Sample
4c5fdacb1945d78d7217b33afe9fe46b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c5fdacb1945d78d7217b33afe9fe46b.exe
Resource
win10v2004-20231222-en
General
-
Target
4c5fdacb1945d78d7217b33afe9fe46b
-
Size
17KB
-
MD5
4c5fdacb1945d78d7217b33afe9fe46b
-
SHA1
ae8866763218d947b85f6a72df4cf6ca4d0ab42a
-
SHA256
c25a8fee2f1161c9672639b23fc4b96f2317b4ffc374f76021c3ed187c239728
-
SHA512
fe01d3f4e359387dd84b100ea41de156388a6bac7c7312d362934f0d2714d467376074cd79ac26e287889f4e0d1545bfaf5628c475ebc77e0137bd475ec466b1
-
SSDEEP
384:0TyRTAGP4peBPt1Df9to8e9WFTNvtQxVt:0GhLP4peBF1r9BeIFT3G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c5fdacb1945d78d7217b33afe9fe46b
Files
-
4c5fdacb1945d78d7217b33afe9fe46b.exe windows:4 windows x86 arch:x86
581b33db055f06aaa0c291dacb0a516f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcmpiA
GlobalAlloc
ReadFile
PeekNamedPipe
Sleep
CreateProcessA
GetStartupInfoA
CreateFileA
GetModuleFileNameA
GetCommandLineA
GetLastError
CreateMutexA
CreateDirectoryA
GetCurrentThreadId
GetModuleHandleA
WriteFile
CloseHandle
DeleteFileA
LoadLibraryA
CreatePipe
GetProcAddress
user32
GetInputState
PostThreadMessageA
GetMessageA
LoadCursorA
CopyIcon
SetSystemCursor
MessageBoxA
advapi32
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_except_handler3
_controlfp
__set_app_type
__getmainargs
_acmdln
strlen
strcpy
sprintf
memset
printf
strcat
memcpy
strstr
getchar
exit
fclose
fopen
strncpy
fread
fseek
__CxxFrameHandler
fscanf
remove
_exit
_XcptFilter
_strlwr
iphlpapi
GetAdaptersInfo
ws2_32
inet_addr
wininet
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA
Sections
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ