Static task
static1
Behavioral task
behavioral1
Sample
4601196863532cbc3e3b25d2ba745e3a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4601196863532cbc3e3b25d2ba745e3a.exe
Resource
win10v2004-20231215-en
General
-
Target
4601196863532cbc3e3b25d2ba745e3a
-
Size
142KB
-
MD5
4601196863532cbc3e3b25d2ba745e3a
-
SHA1
b3ac1ef41b68b14bfbe09a0bfe034808c77643cf
-
SHA256
84540a94cd28fd7672244cbc1874f4309e245f7729780832bf1e31e2ae9ccd29
-
SHA512
81bab4d6c24c1711103d175f87a9da8a683fe9e774be7e6178775d335cc0d7a6e4ee3db25ecda9a79cde9e9a6c91eb9527b7c1bceaa12eff578da35caaf293fb
-
SSDEEP
768:pf3IEp8JRcu/1KOMcwPGxaV6rG22dnWtUB54w4jss3Ydb:NIEp8vdllxg6CvdoUBL4jl0b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4601196863532cbc3e3b25d2ba745e3a
Files
-
4601196863532cbc3e3b25d2ba745e3a.exe windows:5 windows x86 arch:x86
f571ffdc6442b66d9fa5d17895b0153b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
DrawTextW
EndDialog
GetCursor
GetScrollInfo
AlignRects
IsMenu
kernel32
ExitProcess
advapi32
RegEnumKeyExW
RegEnumKeyA
RegEnumKeyExA
RegQueryValueA
RegEnumValueA
RegCreateKeyExW
RegFlushKey
RegLoadKeyW
Sections
.mdkl Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fifg Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.plicj Size: 75KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.folm Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.molac Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ