Static task
static1
Behavioral task
behavioral1
Sample
4283a0e35c5078669fc1045fd90a1e4b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4283a0e35c5078669fc1045fd90a1e4b.exe
Resource
win10v2004-20231215-en
General
-
Target
4283a0e35c5078669fc1045fd90a1e4b
-
Size
157KB
-
MD5
4283a0e35c5078669fc1045fd90a1e4b
-
SHA1
7dcb580aeac017ca5cae97aecc9a5ab7ad5934fa
-
SHA256
ae0ae2f35c6ae6abedba3663627ed40195763c6d4ba27de2cc6ad9bd08f1ac17
-
SHA512
5012b90c99504b11876755c8b4b333a3881ebef3f2e106656180d0fbaccf133e98b7d11e278305f76c5d0b89f05ed2af341c33af54187e6bfa6d83e84e27d20f
-
SSDEEP
3072:6DQfSHA74xfiBFpBpCvP/4P7tIH/ODFbGYRagECXvHR5ywkz:6UfSHA748/BpCESHmBqYRhE253kz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4283a0e35c5078669fc1045fd90a1e4b
Files
-
4283a0e35c5078669fc1045fd90a1e4b.exe windows:4 windows x86 arch:x86
d0df81e24992c48515bb81c2297c3a45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
HeapReAlloc
WaitForSingleObject
GetSystemDefaultLangID
SuspendThread
CloseHandle
GetAtomNameA
HeapCreate
GetStdHandle
GlobalUnlock
InterlockedExchange
WaitForMultipleObjects
LoadLibraryExA
SetConsoleCP
CompareFileTime
VirtualProtect
GetVersion
GetModuleHandleA
GetCommandLineA
GetTickCount
GetConsoleCP
user32
EnableScrollBar
CreateIcon
DestroyMenu
DialogBoxParamA
SetScrollInfo
GetKeyState
InsertMenuA
GetDlgItem
CopyImage
CreateMenu
DispatchMessageA
SetWindowPos
FillRect
DragObject
GetKeyboardLayout
InvertRect
FindWindowA
SetPropA
IsDialogMessage
DrawCaption
GetCursorInfo
advapi32
RegEnumValueA
RegCloseKey
RegEnumKeyA
RegCreateKeyExA
RegQueryInfoKeyA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ