Static task
static1
Behavioral task
behavioral1
Sample
4312983f17da105d6a034ccf69715646.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4312983f17da105d6a034ccf69715646.exe
Resource
win10v2004-20231222-en
General
-
Target
4312983f17da105d6a034ccf69715646
-
Size
568KB
-
MD5
4312983f17da105d6a034ccf69715646
-
SHA1
4efdc0718dd408503b09b6061564943c34ce6019
-
SHA256
ec2718051c5d2b6e01c47d9c051037d016c231a8832910d10ba0e8d5dc7c3f37
-
SHA512
7f2e2dfdaf6b989f83986115ba300ad817c66c56a4a87553fb8b7a94279195d7effbb44c486e95fc7ec40b088f5f6f4086f3ddb880eed57816f0ce416fd86dde
-
SSDEEP
12288:mlxo8+Tt7BjCjRirEz1J8AAvhtknAmuQAxz7iKkrnQvcHm5:moVTt70WWJObw5uQAwKkkEHm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4312983f17da105d6a034ccf69715646
Files
-
4312983f17da105d6a034ccf69715646.exe windows:4 windows x86 arch:x86
2850bf8b5acc93f6fb0afb0bdbe5b712
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CloseWindow
GetCursorInfo
ChangeClipboardChain
DefFrameProcW
GetMenuContextHelpId
MessageBoxExA
GetMessageExtraInfo
ChildWindowFromPointEx
MsgWaitForMultipleObjectsEx
GetUserObjectInformationW
GetKeyNameTextA
CallWindowProcW
IsCharLowerA
DdeSetUserHandle
InsertMenuItemA
MessageBoxA
DefWindowProcW
GetNextDlgTabItem
InternalGetWindowText
ToAscii
TrackPopupMenuEx
DdeDisconnectList
GetKeyboardLayoutNameW
CheckMenuItem
CreateMDIWindowA
GetMenuBarInfo
SendMessageTimeoutA
GetMenuDefaultItem
TrackPopupMenu
GetClassInfoW
VkKeyScanExW
RegisterClassExA
UnhookWindowsHookEx
GetPropA
LockWindowUpdate
SetCaretBlinkTime
LoadIconW
CharPrevW
GetPropW
DestroyWindow
DdeImpersonateClient
CharLowerBuffW
FindWindowA
ShowWindow
SendNotifyMessageA
DdeNameService
GetUpdateRect
CopyIcon
CreateWindowExA
GetAltTabInfo
OemToCharBuffA
DefDlgProcA
GetCaretBlinkTime
GetWindowTextLengthA
EnumWindows
PeekMessageW
DdeClientTransaction
EnableScrollBar
LoadMenuA
ScrollDC
OpenWindowStationW
InsertMenuW
HideCaret
RegisterClassA
DefMDIChildProcW
CheckRadioButton
OffsetRect
SwitchToThisWindow
SetDebugErrorLevel
SetRect
UnregisterHotKey
MonitorFromPoint
kernel32
LeaveCriticalSection
GetStringTypeW
EnumSystemLocalesA
SetEvent
GetEnvironmentStringsW
TerminateProcess
CreateFileA
CompareStringW
UnhandledExceptionFilter
FlushFileBuffers
CloseHandle
GetProcAddress
LocalReAlloc
GetFileType
FreeEnvironmentStringsA
HeapDestroy
CreateMutexA
TlsFree
GetTimeFormatA
GetPrivateProfileStructA
QueryPerformanceCounter
SetFilePointer
CreateEventA
GetEnvironmentStringsA
WaitForSingleObjectEx
InterlockedIncrement
GetStdHandle
VirtualAlloc
EnumResourceNamesA
GetOEMCP
GetDateFormatA
HeapReAlloc
GetLastError
LCMapStringA
SetConsoleMode
GetFileTime
FreeLibrary
IsValidCodePage
GetThreadPriorityBoost
OpenMutexA
IsDebuggerPresent
ExitProcess
GetConsoleMode
LCMapStringW
TlsGetValue
SetHandleCount
FreeEnvironmentStringsW
VirtualFree
SetUnhandledExceptionFilter
GetModuleFileNameA
CompareStringA
CreateSemaphoreA
WaitForMultipleObjectsEx
GetPrivateProfileSectionNamesW
ReadFile
InterlockedExchange
GetCurrentProcessId
GetCurrentThread
GetEnvironmentVariableA
GetCPInfo
GetACP
DeleteCriticalSection
GetCommandLineA
SetLastError
GetConsoleCP
HeapCreate
InitializeCriticalSection
GetCurrentProcess
TlsAlloc
SetStdHandle
GetUserDefaultLCID
EnterCriticalSection
MultiByteToWideChar
WriteFile
GetLocaleInfoA
GetTimeZoneInformation
SetConsoleCtrlHandler
GetProcessHeap
InterlockedDecrement
RtlUnwind
HeapFree
HeapAlloc
Sleep
GetTickCount
GetVersionExA
VirtualQuery
LoadLibraryA
GetConsoleOutputCP
GetSystemTimeAsFileTime
HeapSize
WriteConsoleA
GetLocaleInfoW
WriteConsoleW
WideCharToMultiByte
TlsSetValue
GetModuleHandleA
SetEnvironmentVariableA
GetStringTypeA
GetEnvironmentStrings
IsValidLocale
GetStartupInfoA
GetCurrentThreadId
GetDiskFreeSpaceExW
comctl32
ImageList_GetFlags
InitCommonControlsEx
ImageList_LoadImage
ImageList_DragShowNolock
CreateMappedBitmap
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_LoadImageA
GetEffectiveClientRect
ImageList_Copy
ImageList_Duplicate
ImageList_Remove
_TrackMouseEvent
ImageList_AddMasked
ImageList_GetIconSize
ImageList_Write
ImageList_LoadImageW
ImageList_Draw
CreatePropertySheetPageW
ImageList_GetBkColor
InitMUILanguage
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ