Static task
static1
Behavioral task
behavioral1
Sample
4492d3f662e007c4161ddd16c2c4aec8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4492d3f662e007c4161ddd16c2c4aec8.exe
Resource
win10v2004-20231215-en
General
-
Target
4492d3f662e007c4161ddd16c2c4aec8
-
Size
480KB
-
MD5
4492d3f662e007c4161ddd16c2c4aec8
-
SHA1
a499303ab47880fc556f755f74c47b5dd4d46a05
-
SHA256
314426a40c6f4c3d44cef697c7b674b8086db4714935e09213b67d5fd46d45de
-
SHA512
597af9c3312df8770688e09a4db18c69ae8a05ed7aeca5aae707ea8e55180c1e3699b976825f66c17777f2662afe5d6369e84ae69eb0de5a7d4e1bd3178ee3f3
-
SSDEEP
6144:GhmaaPAfGcNhtJty2iaD8N82kueBdUsS51GWbQYTCpHwypMOG+xERvMFYwq:qacFNhncatPdUlQ82WOG+xXF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4492d3f662e007c4161ddd16c2c4aec8
Files
-
4492d3f662e007c4161ddd16c2c4aec8.exe windows:4 windows x86 arch:x86
c8c77cb52e35c7abc99733b1c14523dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAAsyncGetServByName
advapi32
SetPrivateObjectSecurityEx
user32
GetDoubleClickTime
GetCursor
kernel32
GetCurrentProcessId
Sections
.text Size: 475KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 191B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE