Static task
static1
Behavioral task
behavioral1
Sample
4380e1c80fa8b3e1f28f6eee46fdacbc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4380e1c80fa8b3e1f28f6eee46fdacbc.exe
Resource
win10v2004-20231215-en
General
-
Target
4380e1c80fa8b3e1f28f6eee46fdacbc
-
Size
158KB
-
MD5
4380e1c80fa8b3e1f28f6eee46fdacbc
-
SHA1
225bcd4a66c1fb7dc5e580802667f22f87f654af
-
SHA256
46fd17363147073014b7094ab1fc50858908d82d54a1e9696406ce4878f05f30
-
SHA512
d0cd404f5354e47b574613a0afc6d629187772c61bb22b8799efa86e15f0de9e1a548f0d4c08e3880cfd512477866c88a832fb522dfb74e00554c57f6dcfba8c
-
SSDEEP
3072:OnkbA7UxfHJo4QvL3FEDptw2mCfsb4ptodCJWkLKb3Asun5ZWAh+23AAf1/39Vrn:OkImHJPQ2DpTmCfsb8todCEKgv4Z9+2x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4380e1c80fa8b3e1f28f6eee46fdacbc
Files
-
4380e1c80fa8b3e1f28f6eee46fdacbc.exe windows:4 windows x86 arch:x86
288abeb0ca92567e0ffa4d619223abed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit
kernel32
LockResource
BuildCommDCBAndTimeoutsA
SetThreadPriority
CreatePipe
LeaveCriticalSection
GetModuleHandleA
GetStartupInfoA
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ