Static task
static1
Behavioral task
behavioral1
Sample
4164bda923466cd97ffa30e5aa1c6ee0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4164bda923466cd97ffa30e5aa1c6ee0.exe
Resource
win10v2004-20231222-en
General
-
Target
4164bda923466cd97ffa30e5aa1c6ee0
-
Size
213KB
-
MD5
4164bda923466cd97ffa30e5aa1c6ee0
-
SHA1
000d3bc9f67221f93a92f1109b7fffcab31f51c8
-
SHA256
906046f0a2075ef72bd28f396c8b9c1d6f9e758b07034aa0770b7a16eac33642
-
SHA512
19e5a22c3f61a5da7a83d34af3443432deffab650ac4ccb96626234be112091b56beffd3d9b29033f3af8fa7624098d6915763f45f8f4854afb0175650274e3d
-
SSDEEP
3072:WGf6viAIxc9LNyRulW1fyNi2i9sn2SK0qt94kJ+7fno7DFkMO3jF9G:WGuCxciuW1Ksvt0q907Q7DF43jF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4164bda923466cd97ffa30e5aa1c6ee0
Files
-
4164bda923466cd97ffa30e5aa1c6ee0.exe windows:4 windows x86 arch:x86
56cbe08ea3f3af00b0a5a91fd2253f68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comdlg32
GetOpenFileNameA
FindTextA
ChooseColorA
kernel32
GetCommandLineA
GetModuleHandleA
ExitThread
GetACP
IsBadHugeReadPtr
LoadLibraryA
GetLastError
GetProcAddress
VirtualAlloc
LoadLibraryExA
ExitProcess
lstrlenA
LocalAlloc
shell32
DragQueryFileA
Shell_NotifyIconA
SHGetFileInfoA
user32
UnregisterClassA
EqualRect
EnumThreadWindows
BeginPaint
IsChild
GetSubMenu
UpdateWindow
DrawAnimatedRects
SetClassLongA
ChildWindowFromPoint
CloseClipboard
GetFocus
GetActiveWindow
TranslateMDISysAccel
EnableScrollBar
SetWindowPos
GetKeyboardLayout
GetWindowDC
SetCapture
GetKeyState
ScreenToClient
GetWindowPlacement
CreateMenu
MsgWaitForMultipleObjects
GetSysColorBrush
CreateIcon
GetMenuState
SetScrollRange
GetMenuItemCount
CreatePopupMenu
DefMDIChildProcA
IsIconic
IsDialogMessageA
EnumWindows
DestroyIcon
LoadIconA
ClientToScreen
EmptyClipboard
GetCursorPos
GetMenuStringA
PeekMessageW
GetWindowTextA
SetActiveWindow
DrawEdge
TrackPopupMenu
PtInRect
ShowWindow
GetClassInfoA
GetKeyboardLayoutList
CharLowerBuffA
GetKeyboardState
GetWindowLongA
SetTimer
GetKeyboardType
IsWindow
DestroyCursor
MapVirtualKeyA
LoadStringA
GetParent
IsRectEmpty
IntersectRect
SetWindowPlacement
FindWindowA
IsZoomed
SetMenuItemInfoA
PostQuitMessage
SendMessageW
DefWindowProcA
DeleteMenu
GetIconInfo
DrawIconEx
EndPaint
GetCapture
FrameRect
SetClipboardData
GetDC
DrawTextA
ActivateKeyboardLayout
GetClientRect
GetWindowRect
InsertMenuItemA
GetWindowLongW
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 512B - Virtual size: 55B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES3 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 1024B - Virtual size: 637B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES7 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 512B - Virtual size: 329B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ