Static task
static1
Behavioral task
behavioral1
Sample
4142363540df66bfb8cd29d5a209bf84.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4142363540df66bfb8cd29d5a209bf84.exe
Resource
win10v2004-20231222-en
General
-
Target
4142363540df66bfb8cd29d5a209bf84
-
Size
23KB
-
MD5
4142363540df66bfb8cd29d5a209bf84
-
SHA1
41dbf5a8d0acc56fac819cc14b5180deda4906f5
-
SHA256
869bf7dc270dda8c637c2cef4a451827b240c832d716d9552fe31beb4fbddb1c
-
SHA512
c29b284530fa37b2a341164e09b8b0a306669608397d7c33b9ff1f1dc90264e68f7e64c0ed6a0c2fb8f778e1bb4f0d32e6051e43f0c83f78a330f57ccf74db4c
-
SSDEEP
384:K/nU6bc9GeSaHoJpxSl6ek+QnO1nEi8YkZ/jqK37reZ5/d+5uufVVY0ZScZD6:Ks6bc9LSI0SljkZH9jprCZFd+5uufVVk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4142363540df66bfb8cd29d5a209bf84
Files
-
4142363540df66bfb8cd29d5a209bf84.exe windows:4 windows x86 arch:x86
c44354b7152d46054efe50ff29bbc2cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegOpenKeyExA
RegCloseKey
kernel32
CloseHandle
CreateConsoleScreenBuffer
CreateFileA
DeleteFileA
ExitProcess
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FindClose
FindFirstFileA
FindNextFileA
FlushConsoleInputBuffer
FlushFileBuffers
GetCommandLineA
GetConsoleCursorInfo
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetEnvironmentStringsA
GetFileType
GetLargestConsoleWindowSize
GetLastError
GetModuleHandleA
GetNumberOfConsoleMouseButtons
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetVersionExA
GlobalAlloc
GlobalFree
MoveFileA
PeekConsoleInputA
PeekNamedPipe
ReadConsoleInputA
ReadConsoleOutputA
ReadFile
ScrollConsoleScreenBufferA
SetConsoleActiveScreenBuffer
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTitleA
SetConsoleWindowInfo
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
WriteConsoleOutputA
WriteFile
oleaut32
SysAllocStringByteLen
SysFreeString
SysStringByteLen
user32
MessageBeep
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rloc Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ