Static task
static1
Behavioral task
behavioral1
Sample
46ea2dbcae1e71312becd6bcfc15680b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46ea2dbcae1e71312becd6bcfc15680b.exe
Resource
win10v2004-20231222-en
General
-
Target
46ea2dbcae1e71312becd6bcfc15680b
-
Size
55KB
-
MD5
46ea2dbcae1e71312becd6bcfc15680b
-
SHA1
ab1fc571239de6e2c238d08f62fd82b6b606901e
-
SHA256
d89562da2f6411303e92b7522e971ed08741f6f1c3c12abe83ebc66f7b5d55c9
-
SHA512
e1b95496a81de94f26518ed25dd063dfad90b83340bfac965df16454ea36e697745db565852fc372ad66f1c2309134bf7d8996cf9947b21ea1bb3721a3ddb49e
-
SSDEEP
768:PJlp2DJCRL5ccp408Jc9krsTT8F0lZlnGdId3xuh1lwpTlbhLzoCQdc7CA25wxG5:rp21CRLHEuasTTq0Gd83Q0TlKN0zGZ0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46ea2dbcae1e71312becd6bcfc15680b
Files
-
46ea2dbcae1e71312becd6bcfc15680b.exe windows:4 windows x86 arch:x86
803e7b2f7d586b040c2a8af754f95a68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadMenuA
CloseWindow
CopyIcon
LoadCursorA
CopyImage
GetMenu
GetDlgItem
DialogBoxParamW
GetWindowTextA
GetFocus
IsMenu
DrawTextA
DrawIconEx
InsertMenuA
DrawTextW
CopyRect
GetWindowTextLengthA
DrawIcon
GetDC
CreateIcon
IsWindow
GetCursor
DialogBoxParamA
kernel32
GetOEMCP
lstrcatA
CreateFileA
lstrcpyA
GetFileType
WriteFile
MultiByteToWideChar
LCMapStringW
GetCommandLineA
GetStringTypeA
GetStdHandle
TerminateProcess
GetACP
GetCPInfo
lstrcpynA
lstrcpynW
GetStringTypeW
SetHandleCount
GetModuleFileNameA
GetStartupInfoA
GetVersion
SetFilePointer
comctl32
DrawStatusText
ImageList_AddIcon
ImageList_GetIconSize
ImageList_EndDrag
CreateStatusWindow
ImageList_DrawEx
ImageList_Add
CreateToolbar
MenuHelp
DrawStatusTextW
ImageList_Draw
InitCommonControls
advapi32
RegEnumKeyA
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyW
RegCreateKeyExA
RegDeleteKeyA
RegSetValueW
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyW
RegOpenKeyExA
RegEnumValueW
RegOpenKeyExW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 17.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ