Static task
static1
Behavioral task
behavioral1
Sample
4a0e7891e3a19c9b85fdaa2b89fd74a3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a0e7891e3a19c9b85fdaa2b89fd74a3.exe
Resource
win10v2004-20231215-en
General
-
Target
4a0e7891e3a19c9b85fdaa2b89fd74a3
-
Size
302KB
-
MD5
4a0e7891e3a19c9b85fdaa2b89fd74a3
-
SHA1
53a5a16821ac5c3ad8bf4b57c54b21ee16ecccc5
-
SHA256
23e838acdf3842a79ff178c3ce76a3bae02803011b41f0ddda8a9db6f6166c25
-
SHA512
342cfc991b3b7d2f4024b013385f8d689f7ff44b159d43558e0fb7b938d501d27a4ad6a3cf2c7ac0d733e12a76dacf6d802f426ce42c773d66bc13584aa93b73
-
SSDEEP
6144:MFjJ/d4S1jsLqA8fdZmSOvaTBCF8pEibQ/FktRRies:Qd4CsvmDmSOvaTI6ttji
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a0e7891e3a19c9b85fdaa2b89fd74a3
Files
-
4a0e7891e3a19c9b85fdaa2b89fd74a3.exe windows:5 windows x86 arch:x86
d0e0e6a468ee951c5edcfdd241e21ec7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceExW
GetTempFileNameW
GetTempPathW
GetFileAttributesExW
CloseHandle
ReadFile
GetFileSize
CreateFileW
DeleteFileW
GetModuleFileNameW
GetTickCount
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
FindResourceW
TerminateThread
lstrlenW
GetLastError
CreateThread
CreateFileA
HeapAlloc
HeapFree
GetProcessHeap
WriteFile
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
lstrlenA
LoadResource
LockResource
SizeofResource
WaitForSingleObject
SetErrorMode
lstrcmpiA
lstrcmpA
DeviceIoControl
SetEndOfFile
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetStartupInfoW
RtlUnwind
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualFree
VirtualAlloc
HeapCreate
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
shlwapi
SHGetValueA
SHGetValueW
PathFindFileNameW
PathFileExistsW
PathAppendW
SHSetValueA
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
wininet
InternetConnectA
InternetReadFile
InternetWriteFile
HttpOpenRequestA
InternetAttemptConnect
InternetSetCookieA
HttpAddRequestHeadersA
HttpSendRequestExA
InternetCloseHandle
HttpEndRequestW
InternetOpenA
HttpSendRequestA
urlmon
URLDownloadToCacheFileW
netapi32
Netbios
advapi32
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.share Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
�K� Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE