Static task
static1
Behavioral task
behavioral1
Sample
419991ad301a4df70c7799d5124ba2f7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
419991ad301a4df70c7799d5124ba2f7.exe
Resource
win10v2004-20231222-en
General
-
Target
419991ad301a4df70c7799d5124ba2f7
-
Size
49KB
-
MD5
419991ad301a4df70c7799d5124ba2f7
-
SHA1
9bcf00ff9b4ec7ae377bef85e41e8346707aa3df
-
SHA256
9c0dc3bdbcc9196adb273316cbb6562918bbf6d8d53ea3956117f64f082c2d81
-
SHA512
559b804df1a510a78693d86f25a3d2dcfec53d0a5219a799bef7a0a4098299c03d405c564fca7816b818d13da2e3842b9f58f642942ee7835552e748e5e59b1b
-
SSDEEP
768:vxh812r8gQzj/ulk3w6gzJ9dJucRVrq9DVjM3wVdVLbe1wRvgZ/1vimaUw0qujRH:5y2tk3xgHTe7jjMqvQvicGIyr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 419991ad301a4df70c7799d5124ba2f7
Files
-
419991ad301a4df70c7799d5124ba2f7.exe windows:4 windows x86 arch:x86
d4fd2d5ccaeac37fdbcffb66670a5999
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetLastError
lstrcpyA
DeleteFileA
HeapFree
GetProcessHeap
GetProcAddress
FreeLibrary
ExitThread
GetCurrentProcessId
lstrcatA
GetModuleFileNameA
HeapAlloc
WaitForMultipleObjects
CloseHandle
lstrlenA
lstrcmpA
GetSystemDirectoryA
CreateThread
WaitForSingleObject
SetEvent
CreateEventA
CreateMutexA
GetVersionExA
CreateProcessA
WriteFile
Sleep
CreateFileA
ReleaseMutex
SizeofResource
LoadResource
FindResourceA
GetTickCount
GetTempFileNameA
GetFileAttributesA
ResetEvent
GetFileSize
user32
wsprintfA
advapi32
SetSecurityDescriptorDacl
RegCreateKeyExA
RegSetValueExA
InitializeSecurityDescriptor
RegNotifyChangeKeyValue
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
OleUninitialize
OleInitialize
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ