Static task
static1
Behavioral task
behavioral1
Sample
448a50840b791971dbd209ee266db822.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
448a50840b791971dbd209ee266db822.exe
Resource
win10v2004-20231215-en
General
-
Target
448a50840b791971dbd209ee266db822
-
Size
25KB
-
MD5
448a50840b791971dbd209ee266db822
-
SHA1
361af2143ff90ea50ba53b65e6f9e428ae8de52f
-
SHA256
5bda765f913a2fab3c2d71af1182401af8737118695f07da369db5b6560f0890
-
SHA512
8e60d4a59e02ddfa15a65ff01e3d319bb4187306ff05d301280803c7c24d410c22bce8a0cfc7173253bfaeee3d591978267222165916e70122060473df3b06be
-
SSDEEP
384:woEJmXa6sDe5iolIahtdr+Lw/5xx4xcYhNfE8vHbRBledcR1:3Eea6sDe5llXh/bhEVfHvbRBlW81
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 448a50840b791971dbd209ee266db822
Files
-
448a50840b791971dbd209ee266db822.exe windows:4 windows x86 arch:x86
021964f76cd12dcd0b8adc770efbf4a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextA
LoadMenuA
GetMenu
CreateIcon
GetCursor
CopyRect
GetDC
InsertMenuA
EndDialog
CopyIcon
DialogBoxParamW
GetWindowTextA
DrawIconEx
IsMenu
GetDlgItem
DrawIcon
CopyImage
IsWindow
CloseWindow
DrawTextW
DialogBoxParamA
GetWindowTextLengthA
kernel32
MultiByteToWideChar
GetStdHandle
GetFileType
GetStringTypeW
GetStringTypeA
LCMapStringA
WriteFile
lstrcpynA
GetCurrentProcess
GetOEMCP
lstrcatA
lstrcpynW
lstrcpyA
TerminateProcess
CreateFileA
GetCPInfo
LCMapStringW
GetVersion
GetACP
GetCommandLineA
GetModuleFileNameA
SetFilePointer
SetHandleCount
comctl32
MenuHelp
ImageList_GetIcon
DrawStatusText
CreateStatusWindow
ImageList_Create
ImageList_GetIconSize
CreateMappedBitmap
ImageList_Draw
ImageList_LoadImageA
ImageList_DragEnter
ImageList_Copy
advapi32
RegDeleteKeyW
RegCreateKeyA
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueA
RegQueryValueExW
RegSetValueA
RegQueryValueA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 17.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ