Static task
static1
Behavioral task
behavioral1
Sample
48237803d701d541351b7e739113d651.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48237803d701d541351b7e739113d651.exe
Resource
win10v2004-20231215-en
General
-
Target
48237803d701d541351b7e739113d651
-
Size
10KB
-
MD5
48237803d701d541351b7e739113d651
-
SHA1
12b109565dff6eb0b595e3afb73e2ce349884bac
-
SHA256
34051a6450dc87d177b23731060c88da962cdd858f8791a978b33e42ac0b4a10
-
SHA512
89b2b8c0f0ef567d8efb3dd39edf3195f4a1a87f83c1ebb60dfc722937359a23c2e49ead12e60f5670ae69c36e0a5ad7f10b52873738e7b78f411e7c42c047b3
-
SSDEEP
192:bGhuKBqfTZP9pnlULeJQsg6sZyQkdERWPouE+jg5g:scZ7nlAeJvgt09dERWPou1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48237803d701d541351b7e739113d651
Files
-
48237803d701d541351b7e739113d651.exe windows:4 windows x86 arch:x86
9288a23175a3d9a769acf8a03dc71d85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
MoveFileExA
CreateDirectoryA
Sleep
lstrcmpiA
DeleteFileA
FreeLibrary
GetTempFileNameA
GetSystemDirectoryA
GetTempPathA
GetLastError
CreateMutexA
ExitProcess
lstrcatA
GetCurrentThread
GetTickCount
GetProcAddress
GetStartupInfoA
CreateProcessA
FindFirstFileA
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameA
CancelIo
GetShortPathNameA
CreateFileA
GetCurrentProcess
GetFileInformationByHandle
SetFilePointer
ReadFile
CloseHandle
GetThreadPriority
GetACP
HeapAlloc
GetProcessHeap
HeapFree
GetFileSize
user32
GetCaretPos
GetCaretBlinkTime
wsprintfA
GetCursor
GetTopWindow
ClipCursor
ClientToScreen
SetActiveWindow
DestroyCaret
GetCapture
GetClipCursor
GetActiveWindow
gdi32
GetColorSpace
EndPage
WidenPath
CloseFigure
GdiGetBatchLimit
GdiSetBatchLimit
FillPath
StrokePath
GetBkColor
GetBrushOrgEx
StrokeAndFillPath
BeginPath
GetBkMode
PathToRegion
EndDoc
EndPath
UnrealizeObject
StartPage
CancelDC
GdiFlush
AbortPath
CreateCompatibleDC
FlattenPath
AbortDoc
CreateCompatibleBitmap
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 509B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 950B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ