Static task
static1
Behavioral task
behavioral1
Sample
451ab6d0f1c40d218c4ae0b5a9d2bc40.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
451ab6d0f1c40d218c4ae0b5a9d2bc40.exe
Resource
win10v2004-20231222-en
General
-
Target
451ab6d0f1c40d218c4ae0b5a9d2bc40
-
Size
52KB
-
MD5
451ab6d0f1c40d218c4ae0b5a9d2bc40
-
SHA1
0b9431abff8e1b5f447271d708e7aaebca90f542
-
SHA256
829b38da676f344ab45866a7654dcfd17a3dbda474de3e20bf3f45d6358684ee
-
SHA512
d83e2ed55fc34a5436d1a003b8a6664a79777e4feeca1c22ff8c40c0a7120fbe8e75bedb4e662889cfeab7de7c300443a06061cc6d02849818d6794bcf8557ba
-
SSDEEP
768:ubrmGQpjl/ulk3f4KAOJfb/UbZLDtpZTm4h+7JQNVQoio8f1FnimaUwALBxVbL9S:ubrrk3fvAOenv4L31ic7VbL9yr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 451ab6d0f1c40d218c4ae0b5a9d2bc40
Files
-
451ab6d0f1c40d218c4ae0b5a9d2bc40.exe windows:4 windows x86 arch:x86
8758d7fe1f7d184b7f76d720c23db132
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetLastError
lstrcpyA
DeleteFileA
HeapAlloc
FreeLibrary
ExitThread
GetCurrentProcessId
lstrcatA
GetModuleFileNameA
WaitForMultipleObjects
CloseHandle
GetSystemDirectoryA
GetTickCount
GetTempFileNameA
lstrlenA
GetFileAttributesA
ResetEvent
CreateThread
WaitForSingleObject
SetEvent
CreateEventA
CreateMutexA
GetVersionExA
CreateProcessA
WriteFile
Sleep
CreateFileA
ReleaseMutex
SizeofResource
LoadResource
FindResourceA
GetProcessHeap
lstrcmpA
HeapFree
user32
wsprintfA
advapi32
RegCreateKeyExA
RegNotifyChangeKeyValue
RegSetValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
OleUninitialize
OleInitialize
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ