Static task
static1
Behavioral task
behavioral1
Sample
466d4a46243881ad0f0ef600cda02756.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
466d4a46243881ad0f0ef600cda02756.exe
Resource
win10v2004-20231215-en
General
-
Target
466d4a46243881ad0f0ef600cda02756
-
Size
635KB
-
MD5
466d4a46243881ad0f0ef600cda02756
-
SHA1
0a0c3a079c4bb2aa22c7019bf45f2f2bacfdce1d
-
SHA256
c26de771358c6c39483d11180f642993757f58768447d5d84008bf5c8a920c30
-
SHA512
7f117ce0ae6f0a80995501f3405fe2b3ca433cba385ae1632053f5f0fbeaad7541310a394d547b84f30ad3bce80aff5123ee317100c1c097c222614d8035338b
-
SSDEEP
12288:j0sXYFjMSjOejSuBlKdtTgnGY2k9IvRPweaFg1l3IV+y9cEyu1Ns:jgxMSjt3Tw2C6eqg19o+yiEyu8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 466d4a46243881ad0f0ef600cda02756
Files
-
466d4a46243881ad0f0ef600cda02756.exe windows:4 windows x86 arch:x86
e26f8e8fbeabe70ed72bd1f51f22724c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
GlobalFree
HeapCreate
RaiseException
InterlockedExchange
GetACP
Sleep
CloseHandle
GetSystemDirectoryA
GetCommandLineA
GetStdHandle
EnterCriticalSection
GlobalAddAtomA
GetFileAttributesA
GetLogicalDrives
VirtualProtect
LockResource
SetErrorMode
LoadLibraryExA
GetLastError
GlobalAddAtomA
user32
IsIconic
GetWindowTextA
wsprintfA
BeginPaint
GetParent
FlashWindowEx
DrawTextA
FillRect
SetForegroundWindow
ReleaseDC
GetActiveWindow
ValidateRect
ShowWindow
GetClassNameA
GetWindow
EndPaint
GetCursorPos
FrameRect
GetFocus
httpapi
HttpCreateHttpHandle
HttpRemoveUrl
HttpAddUrl
HttpTerminate
HttpInitialize
winhttp
WinHttpOpen
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ