Static task
static1
Behavioral task
behavioral1
Sample
4366a44a7162985bdddc15d2a70851a1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4366a44a7162985bdddc15d2a70851a1.exe
Resource
win10v2004-20231215-en
General
-
Target
4366a44a7162985bdddc15d2a70851a1
-
Size
564KB
-
MD5
4366a44a7162985bdddc15d2a70851a1
-
SHA1
92a679047502fd7ff6c2204c941cdbaaecfee920
-
SHA256
b5c226333212d014c9e7ecc998c2481ee42e916e9726ed59580d3b66d6a86fe6
-
SHA512
d9cc6cbed3ed054df819d86254bb098c5223f56bdbf7addef3d03fca00adbe2b14d58e0af3843661121e2ad73684b44b1cb7ae75b0c6f9dba2c46420b376f8cd
-
SSDEEP
12288:qjAJ7usBY88IGwQa4KggMeF5QSHn/Fl8ryq59L8fv3s0GZ:wA9usiHwQTQQSHnj8Vqv3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4366a44a7162985bdddc15d2a70851a1
Files
-
4366a44a7162985bdddc15d2a70851a1.exe windows:4 windows x86 arch:x86
e26241abfcc5f83823bb01ffb0eb4b62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetFindNextFileA
GopherGetAttributeA
InternetOpenA
InternetCombineUrlA
FreeUrlCacheSpaceA
FindFirstUrlCacheEntryW
InternetQueryDataAvailable
kernel32
LCMapStringW
CreatePipe
GetUserDefaultLCID
GetPrivateProfileStringA
GetStartupInfoA
SetLastError
FindClose
GetCurrentProcess
GetProfileIntA
GlobalFindAtomA
GetOEMCP
SetConsoleCtrlHandler
VirtualUnlock
GetStringTypeW
WritePrivateProfileStringW
HeapCreate
LoadLibraryA
InterlockedDecrement
SetThreadContext
ReadFile
VirtualAlloc
SetHandleCount
GetEnvironmentStrings
Sleep
CloseHandle
CompareStringW
GetTempFileNameW
GetTickCount
CreateFileA
GetFileTime
FindNextChangeNotification
GetTempFileNameA
GetDiskFreeSpaceExA
GetEnvironmentStringsW
EnumResourceNamesA
ReadConsoleW
TerminateProcess
WriteConsoleOutputAttribute
GetCPInfo
MultiByteToWideChar
GetTimeFormatA
RtlUnwind
GetCurrencyFormatW
lstrcatW
IsValidLocale
InterlockedIncrement
GetConsoleMode
SetStdHandle
EnumSystemLocalesA
GetCurrentThreadId
SetCurrentDirectoryW
WriteConsoleInputW
GetProfileIntW
WaitForSingleObject
VirtualFree
WriteProfileSectionA
VirtualLock
SetComputerNameA
FlushFileBuffers
LockResource
GetStdHandle
HeapSize
SetEnvironmentVariableA
GetModuleFileNameA
GetLocaleInfoW
VirtualQuery
CompareFileTime
GetProcessHeap
DebugBreak
CreateMutexA
GetVolumeInformationW
EnterCriticalSection
WriteConsoleOutputW
CreateRemoteThread
GetDriveTypeA
GetProcAddress
UnlockFile
FindAtomA
LoadLibraryExA
GetTimeZoneInformation
GetCommandLineA
GetConsoleOutputCP
EnumDateFormatsExW
GetCurrentThread
QueryPerformanceCounter
SetFilePointer
ReadConsoleA
OpenMutexA
FreeLibraryAndExitThread
WideCharToMultiByte
TlsFree
FreeEnvironmentStringsA
SetVolumeLabelA
SetComputerNameW
FreeEnvironmentStringsW
GlobalDeleteAtom
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetNumberFormatW
LCMapStringA
WriteConsoleW
EnumSystemCodePagesW
GetEnvironmentVariableW
HeapAlloc
GetDateFormatA
GetCompressedFileSizeW
GetLastError
IsDebuggerPresent
FileTimeToSystemTime
TlsSetValue
GetVersionExA
HeapReAlloc
TlsGetValue
EnumResourceTypesA
GetACP
DeleteCriticalSection
TlsAlloc
GetModuleHandleA
HeapFree
FreeLibrary
GetStringTypeExA
ReadConsoleInputA
WriteFile
LeaveCriticalSection
GetCurrentProcessId
CreateDirectoryA
InitializeCriticalSection
IsValidCodePage
GetVolumeInformationA
GetEnvironmentVariableA
ExitProcess
RemoveDirectoryW
GetFileType
lstrlen
HeapDestroy
WriteProfileStringW
WriteConsoleA
GetThreadPriority
CompareStringA
GetStringTypeA
GetNumberFormatA
GetConsoleCP
FindAtomW
EnumDateFormatsExA
InterlockedExchange
SetThreadAffinityMask
lstrcatA
GetLocaleInfoA
user32
CallWindowProcW
ReleaseCapture
EndDialog
ClientToScreen
GetGUIThreadInfo
PostMessageW
GetMenuItemCount
ChangeDisplaySettingsA
LoadKeyboardLayoutA
RemoveMenu
DispatchMessageA
GetClassWord
GetPriorityClipboardFormat
TranslateAcceleratorA
CreateAcceleratorTableW
DeleteMenu
CloseClipboard
NotifyWinEvent
SetDoubleClickTime
GetPropW
EnumDisplaySettingsExW
CountClipboardFormats
GetThreadDesktop
RegisterClassExA
GetWindowModuleFileNameA
EnumThreadWindows
OemKeyScan
SetMenuDefaultItem
ReuseDDElParam
SetWindowsHookW
GetCaretPos
DestroyWindow
CharNextExA
RegisterClassA
PackDDElParam
SetClipboardData
ScrollWindowEx
WINNLSGetEnableStatus
DestroyAcceleratorTable
GetDoubleClickTime
GetKBCodePage
CreateIcon
OpenIcon
UnregisterClassA
SetScrollRange
LoadKeyboardLayoutW
CopyRect
DefFrameProcA
PostQuitMessage
EditWndProc
comctl32
ImageList_EndDrag
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_GetImageRect
InitCommonControlsEx
ImageList_GetBkColor
ImageList_GetImageCount
InitMUILanguage
Sections
.text Size: 176KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 244KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ