Static task
static1
Behavioral task
behavioral1
Sample
4a09d39f431a69fb9ddb7df3c0aaa4a9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a09d39f431a69fb9ddb7df3c0aaa4a9.exe
Resource
win10v2004-20231215-en
General
-
Target
4a09d39f431a69fb9ddb7df3c0aaa4a9
-
Size
144KB
-
MD5
4a09d39f431a69fb9ddb7df3c0aaa4a9
-
SHA1
ab6a63d227dd50f627b15883428e286803c1b91a
-
SHA256
89194e214b65893def54258ec3f64cd54947a3c40d563482b3ab8e3722b455ad
-
SHA512
8034496496be3ddd75ffb4036e30940e502a198cf1e76b724c5677feabc3a19c6cde445ff11630df52ef67cb49d1a59ea3236d6b07213d663f7d95e2836cf064
-
SSDEEP
3072:V+Iw7YZaXGpRmpYd7fxDTQOM5BGC2EBUe1YY9LkZ8zQ41fDSWRqu:VEsaXGpwmdTIx/f9L28bm4qu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a09d39f431a69fb9ddb7df3c0aaa4a9
Files
-
4a09d39f431a69fb9ddb7df3c0aaa4a9.exe windows:4 windows x86 arch:x86
d2bbddb8c010773f04c2d9dd29668462
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
Sections
CODE Size: 132KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE