Static task
static1
Behavioral task
behavioral1
Sample
04923b5f68fc4239a8dfc6dcdd0b033e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04923b5f68fc4239a8dfc6dcdd0b033e.exe
Resource
win10v2004-20231215-en
General
-
Target
04923b5f68fc4239a8dfc6dcdd0b033e
-
Size
616KB
-
MD5
04923b5f68fc4239a8dfc6dcdd0b033e
-
SHA1
e70c705b926cd3c7375dac332afdd00e3e99cab7
-
SHA256
c11d7b0db8cadbf7ae84f338b7c4d391aeeb13bea80fdf8db82d519053afbd38
-
SHA512
8e1454bfc14dd2fbd652264c705eda1a0d42749ba7e237e4e232abf4f377309790079a6959c039e4ef6112b9a3c3a4d7a0985bc31bdd2deb73b4d662c764706d
-
SSDEEP
12288:INKe36pInO+42Bwu8INI7to6dg6kb9S1BgcWdy4kWN:INJo2lNQaNovjOyk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04923b5f68fc4239a8dfc6dcdd0b033e
Files
-
04923b5f68fc4239a8dfc6dcdd0b033e.exe windows:4 windows x86 arch:x86
44261dfaa38aad9016599b02c1afeedb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetCharABCWidthsA
PatBlt
GetBitmapDimensionEx
GdiPlayDCScript
SetDIBColorTable
CopyEnhMetaFileW
AddFontResourceA
GdiPlayJournal
GetRandomRgn
GetKerningPairs
CopyEnhMetaFileA
CreateDIBPatternBrushPt
GetBitmapBits
PolyPolygon
CreateDiscardableBitmap
EnumFontFamiliesA
GetEnhMetaFileA
GetCurrentPositionEx
CreateEllipticRgnIndirect
ExtTextOutW
advapi32
RegOpenKeyExA
RegSaveKeyA
CryptGenKey
RegSetValueExW
CryptCreateHash
LookupAccountSidA
RegQueryMultipleValuesW
CryptEncrypt
RegRestoreKeyW
RegCloseKey
LookupPrivilegeValueW
InitiateSystemShutdownW
CryptGetDefaultProviderA
LookupPrivilegeNameW
CryptDestroyKey
CryptEnumProvidersW
user32
LoadMenuW
EnumWindowStationsW
SetTimer
PostMessageW
SetMenuContextHelpId
ModifyMenuW
RegisterClassA
MonitorFromWindow
RegisterClassExA
MessageBoxIndirectA
comctl32
InitCommonControlsEx
shell32
SHEmptyRecycleBinW
SHGetDiskFreeSpaceA
comdlg32
GetOpenFileNameA
kernel32
CommConfigDialogW
WideCharToMultiByte
FlushFileBuffers
WriteConsoleOutputAttribute
FreeLibrary
UnhandledExceptionFilter
GetEnvironmentStringsW
ReadConsoleOutputCharacterW
GetSystemTimeAsFileTime
RtlUnwind
GetStartupInfoA
GetVersionExW
SetLastError
VirtualAlloc
VirtualQuery
TlsFree
FreeEnvironmentStringsA
ReadFile
GetTickCount
InterlockedExchange
EnumCalendarInfoExA
TlsSetValue
QueryPerformanceCounter
DeleteAtom
GetStdHandle
GetCurrentThreadId
HeapCreate
GetProcAddress
GetConsoleCP
GetFileType
GetModuleHandleA
GetDateFormatA
VirtualFree
GetUserDefaultLCID
EnumResourceTypesW
GetLocaleInfoW
GetStringTypeA
GetVersionExA
WriteConsoleW
TlsAlloc
GetCurrentProcessId
lstrcpy
GetACP
IsValidCodePage
GetNamedPipeInfo
HeapFree
GetProcessHeap
GetTimeZoneInformation
GetPrivateProfileSectionNamesW
SetEnvironmentVariableA
GetConsoleOutputCP
CloseHandle
GetCPInfo
FreeEnvironmentStringsW
GetStringTypeW
GetDiskFreeSpaceExA
DeleteCriticalSection
HeapReAlloc
IsValidLocale
OpenMutexA
GetCalendarInfoW
LeaveCriticalSection
ExitProcess
HeapAlloc
WriteFile
CreateThread
HeapDestroy
MultiByteToWideChar
SetUnhandledExceptionFilter
WriteConsoleA
FindNextFileW
SetConsoleCtrlHandler
GetLocaleInfoA
InterlockedIncrement
GetConsoleMode
CompareStringW
CompareStringA
LoadLibraryA
CreateRemoteThread
SetFilePointer
WaitForDebugEvent
HeapSize
TlsGetValue
SetHandleCount
GetCurrentThread
GetLastError
GetThreadSelectorEntry
EnumSystemLocalesA
IsDebuggerPresent
SetStdHandle
GetCurrentProcess
TerminateProcess
Sleep
LocalHandle
GetTimeFormatA
InterlockedDecrement
GetFileTime
WaitForSingleObject
InitializeCriticalSection
LCMapStringW
LCMapStringA
GetModuleFileNameA
GetEnvironmentStrings
GetOEMCP
CreateFileA
CreateMutexA
CreateMailslotA
GetNamedPipeHandleStateW
EnterCriticalSection
GetCommandLineA
Sections
.text Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 319KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ