Static task
static1
Behavioral task
behavioral1
Sample
424f4ebe27505b90694f45a4b96d3fbc.exe
Resource
win7-20231215-en
General
-
Target
424f4ebe27505b90694f45a4b96d3fbc
-
Size
48KB
-
MD5
424f4ebe27505b90694f45a4b96d3fbc
-
SHA1
dbb342d1e722cec73b32bd0e593bd67651263cb1
-
SHA256
3a38465eb571e07343369afcad037ae7430eaec21688dce209c54cfe8b4f2d20
-
SHA512
9208ac49e87c4ab89d85623a63e17cde6288b6c0421a4d9397fe51d740b6753670e679aafbe578113da19693c695cead0228f7c2acd0f4751a46237925179e9c
-
SSDEEP
768:hPgAJrQu/CNyveStc/kNvg+ISNQeCkfh7lWl2kImUN95aBpZ1kC44FN714i34AuM:hPgAJrQ8bX6kGcNQezHi2kILaBv1kC4y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 424f4ebe27505b90694f45a4b96d3fbc
Files
-
424f4ebe27505b90694f45a4b96d3fbc.exe windows:6 windows x86 arch:x86
5e4ebf10b99d0d3ab7348178aa458f0f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
lstrlenA
GetVolumeInformationA
WaitForSingleObject
GetModuleHandleA
OpenProcess
CreateToolhelp32Snapshot
Sleep
GetFileAttributesA
DeleteFileA
Process32Next
GetSystemInfo
CreateThread
GetProcAddress
SetConsoleTitleA
GetExitCodeProcess
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
Process32First
CloseHandle
GetVersionExA
CreateFileA
GetLastError
DeviceIoControl
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ExitProcess
SetPriorityClass
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
UnhandledExceptionFilter
user32
MessageBoxA
shell32
ShellExecuteA
ShellExecuteExA
msvcp140
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
wininet
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
iphlpapi
GetAdaptersInfo
vcruntime140
memcpy
_except_handler4_common
__CxxFrameHandler3
__std_terminate
__std_exception_destroy
__std_exception_copy
_CxxThrowException
memset
memmove
api-ms-win-crt-string-l1-1-0
isalnum
isspace
tolower
isprint
strncpy
api-ms-win-crt-stdio-l1-1-0
fgetc
__stdio_common_vsprintf_s
__p__commode
fflush
fopen
__stdio_common_vsprintf
_set_fmode
fputc
fwrite
_get_stream_buffer_pointers
_fseeki64
fgetpos
fread
fsetpos
ungetc
setvbuf
fclose
api-ms-win-crt-heap-l1-1-0
free
malloc
_set_new_mode
_callnewh
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_initterm_e
exit
_exit
_get_initial_narrow_environment
_initialize_narrow_environment
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
__p___argc
_register_onexit_function
_crt_atexit
terminate
_controlfp_s
system
_initterm
_initialize_onexit_table
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
rename
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ