Static task
static1
Behavioral task
behavioral1
Sample
4089e2d15e47fc1e2959df57341819c3.exe
Resource
win7-20231215-en
General
-
Target
4089e2d15e47fc1e2959df57341819c3
-
Size
49KB
-
MD5
4089e2d15e47fc1e2959df57341819c3
-
SHA1
646c428aef40978f43e8ed9d9850d8b54bd4f115
-
SHA256
e4d2d7fd4bbd254686bf6ff4cdc6192531f5eb0eee2cf80948930640540293a7
-
SHA512
77d748d6648bb0459c09e16852c655ef1295d3c5d57eb77868c2beb4153c3e68ab88461196ded4e9c028f8e0ef6c87010355ebf5c845c96e6e7b005d5c696776
-
SSDEEP
384:9U5qsE9CR6lU7Us65TJf76Vung+IXYnFe8v3R2o32o32o32o32oql0cPSuf5kAn:ChPR6K7UvVj6kg+CYnFeyIl0sXf5zn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4089e2d15e47fc1e2959df57341819c3
Files
-
4089e2d15e47fc1e2959df57341819c3.exe windows:4 windows x86 arch:x86
901a547110d6c5a8f47b36b88ef6fe41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ReleaseMutex
ReleaseMutex
GetSystemTime
GetStartupInfoA
ReleaseMutex
GetSystemTime
TerminateProcess
VirtualProtectEx
WaitForSingleObject
CreateFileA
GetProcAddress
LoadLibraryA
VirtualProtect
IsValidCodePage
GetStartupInfoW
GetStartupInfoW
ReadFile
WaitForSingleObjectEx
ReleaseMutex
VirtualProtect
CreateProcessW
ReadProcessMemory
Sleep
TerminateProcess
wlanapi
WlanCloseHandle
WlanEnumInterfaces
WlanOpenHandle
WlanSetInterface
WlanEnumInterfaces
WlanEnumInterfaces
WlanEnumInterfaces
WlanSetInterface
WlanSetInterface
WlanSetInterface
WlanSetProfileEapXmlUserData
WlanEnumInterfaces
WlanEnumInterfaces
WlanCloseHandle
WlanEnumInterfaces
WlanEnumInterfaces
WlanOpenHandle
WlanSetInterface
WlanCloseHandle
WlanEnumInterfaces
Sections
.text Size: 19KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ