Static task
static1
Behavioral task
behavioral1
Sample
4776cfd37aa49b3d20e6484776e9c832.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4776cfd37aa49b3d20e6484776e9c832.exe
Resource
win10v2004-20231222-en
General
-
Target
4776cfd37aa49b3d20e6484776e9c832
-
Size
48KB
-
MD5
4776cfd37aa49b3d20e6484776e9c832
-
SHA1
a89c820c5c765392dd3b235a5e24158c30deb57b
-
SHA256
e58eb28a5f8e53d9196d95e45d7528c8b9da79c1f505fa2201ba4a7a0cb1a25e
-
SHA512
38c9924cbd18b1e990995bb095a97eb38ec9f748b52ebaf281f58baad4c280696019ad9321605eb6116fe385aff1dbb287580a65f58f5d7992fa448816c55ada
-
SSDEEP
384:/nX+IMv7zyPhwQ37NVT4KmlSOQsQzzhzelREBORuM9zK0VHb86ojjUsSJ:Pun7zW57NVT0QsghzelREoR1QIg6o+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4776cfd37aa49b3d20e6484776e9c832
Files
-
4776cfd37aa49b3d20e6484776e9c832.exe windows:4 windows x86 arch:x86
fcd1bdba31e85c21aef31ad0ff1ab198
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sleep
GetModuleFileNameA
GetStdHandle
GetCommandLineA
WaitForSingleObject
ReadFile
CreatePipe
GetModuleHandleA
HeapFree
HeapAlloc
GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetProcAddress
GetOEMCP
LoadLibraryA
GetCPInfo
GetACP
VirtualAlloc
WriteFile
HeapReAlloc
HeapCreate
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetStartupInfoA
GetVersion
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
VirtualFree
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
RtlUnwind
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
user32
SetTimer
MessageBoxA
DefWindowProcA
DestroyWindow
MoveWindow
SetFocus
SendMessageA
GetWindowTextLengthA
MessageBeep
ShowWindow
UpdateWindow
LoadCursorA
BringWindowToTop
LoadIconA
CreateDialogParamA
RegisterClassA
LoadBitmapA
TranslateMessage
LoadStringA
GetMessageA
PostMessageA
DispatchMessageA
WaitForInputIdle
EndPaint
GetSystemMetrics
BeginPaint
PostQuitMessage
GetWindowLongA
CreateWindowExA
gdi32
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ