Static task
static1
Behavioral task
behavioral1
Sample
4e25c32ef9e4ed2e25464ca50ff888ac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e25c32ef9e4ed2e25464ca50ff888ac.exe
Resource
win10v2004-20231215-en
General
-
Target
4e25c32ef9e4ed2e25464ca50ff888ac
-
Size
213KB
-
MD5
4e25c32ef9e4ed2e25464ca50ff888ac
-
SHA1
bb8390f6d55d3ae9baf49779e6a0487bbe7ca6c8
-
SHA256
a6d28c554bf06df0d1480c44959e6c40535e2be81bcace3861ae75f0f61afa32
-
SHA512
eb74ba5810d2105b59973fa063c7aa941ceeb48d80d273fa6d9d0b04b9d4331b345becbaf20a58c68be7ac524d781aa4331fa22962df0bc36cbf769765ba3b81
-
SSDEEP
6144:Mi2D1NohkJxxd1ywed9OEw7IAC3mQwdqHK9iW:MD1NBxLywed8lcADQwdAUx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e25c32ef9e4ed2e25464ca50ff888ac
Files
-
4e25c32ef9e4ed2e25464ca50ff888ac.exe windows:4 windows x86 arch:x86
a5af1242792a7f2f99e1d569a6e27924
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetCurrentPositionEx
CreatePalette
SetBkMode
LineTo
CreateDIBSection
SelectPalette
RestoreDC
GetClipBox
SelectObject
GetRgnBox
SetTextColor
CreateFontIndirectA
SetBkColor
SaveDC
GetObjectA
CreateCompatibleBitmap
GetPaletteEntries
SetPixel
GetDCOrgEx
CreateBitmap
CreatePenIndirect
GetBitmapBits
CreateBrushIndirect
CopyEnhMetaFileA
GetPixel
GetDIBColorTable
BitBlt
CreateCompatibleDC
GetDIBits
CreateDIBitmap
comdlg32
GetFileTitleA
FindTextA
GetOpenFileNameA
ChooseColorA
msvcrt
wcstol
user32
GetClassInfoA
EnableMenuItem
EmptyClipboard
EqualRect
GetDC
FrameRect
DrawTextA
GetDCEx
EndPaint
EnumChildWindows
EnableScrollBar
GetDlgItem
GetClipboardData
EnumThreadWindows
EnableWindow
GetActiveWindow
GetClassLongA
GetCapture
GetForegroundWindow
GetFocus
GetCursorPos
GetClientRect
GetClassNameA
DrawMenuBar
FillRect
GetCursor
GetDesktopWindow
FindWindowA
DrawIconEx
EnumWindows
shlwapi
SHStrDupA
PathGetCharTypeA
PathIsContentTypeA
SHQueryInfoKeyA
SHEnumValueA
SHDeleteValueA
ole32
CoCreateFreeThreadedMarshaler
CLSIDFromProgID
CoCreateInstanceEx
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
advapi32
RegOpenKeyExA
RegEnumKeyExA
kernel32
GlobalAddAtomA
GetThreadLocale
GetProcAddress
GetStringTypeW
LockResource
ExitProcess
HeapAlloc
GetStringTypeA
GetLocaleInfoA
GetSystemDefaultLangID
GlobalDeleteAtom
LoadResource
LoadLibraryExA
GetStdHandle
GetVersion
GetModuleHandleA
GetVersionExA
InitializeCriticalSection
VirtualAlloc
ExitThread
GetLocalTime
GlobalAlloc
GetOEMCP
RaiseException
GetTickCount
GetProcessHeap
LoadLibraryA
IsBadReadPtr
LocalAlloc
GetModuleFileNameA
GlobalFindAtomA
HeapFree
GetUserDefaultLCID
lstrlenA
VirtualAllocEx
oleaut32
OleLoadPicture
SysStringLen
shell32
SHGetFileInfoA
SHGetDiskFreeSpaceA
SHGetDesktopFolder
DragQueryFileA
Sections
CODE Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 621B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc5 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc0 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc8 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc4 Size: 512B - Virtual size: 306B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc1 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ