Static task
static1
Behavioral task
behavioral1
Sample
48176ac6e2a538f4a430edacbde378d8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48176ac6e2a538f4a430edacbde378d8.exe
Resource
win10v2004-20231222-en
General
-
Target
48176ac6e2a538f4a430edacbde378d8
-
Size
380KB
-
MD5
48176ac6e2a538f4a430edacbde378d8
-
SHA1
1d1e0f0ac6bb3251eb5b52cf13b81bfc2e03f313
-
SHA256
b7a082c35892459891b17ad7f805e99a9643bbde61b5a4980e50641d13f772bc
-
SHA512
0d5f947d1b4355c333a89aa4dbf9c27d0c97decbc137ba78317baf50e39739caf443dcef39736582f38ff206c8a963dd1495f6a1450491daebed48aa68ccef5a
-
SSDEEP
6144:qbObPjZYG1rFyjnhJHhl/D64GeBhqjHS9IITNhxza4vTTlxTcpKLb:qyjjeG1Zyjnhrl/DVB0m9IIXpa4vTTrf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48176ac6e2a538f4a430edacbde378d8
Files
-
48176ac6e2a538f4a430edacbde378d8.exe windows:4 windows x86 arch:x86
9bf4216394da246ad6ab62f46b1194f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawFrameControl
GetMenuBarInfo
SetProcessDefaultLayout
SetWindowPos
ChangeDisplaySettingsA
DdeFreeStringHandle
GetWindowTextW
LoadMenuIndirectW
DestroyWindow
ArrangeIconicWindows
CallWindowProcA
SendMessageW
GetMenuItemRect
CharUpperW
SetWindowsHookA
DefWindowProcW
GetClassNameA
OpenInputDesktop
RegisterClassA
SetWindowLongA
CloseClipboard
GetCursorInfo
OpenClipboard
EndDialog
RegisterClassExA
IsDialogMessage
EnumThreadWindows
EnumPropsW
CreateDialogIndirectParamA
EnumDisplaySettingsA
DrawMenuBar
CharLowerA
WindowFromPoint
GetOpenClipboardWindow
UnhookWindowsHook
RegisterDeviceNotificationA
EndDeferWindowPos
ShowWindow
CreateWindowExA
MessageBoxA
GetUpdateRgn
GetDlgItem
MapVirtualKeyExW
gdi32
GetDIBits
SetBrushOrgEx
Polygon
ExcludeClipRect
GetTextColor
Pie
ResetDCW
CreatePolygonRgn
GetKerningPairsA
GetGlyphOutlineA
CreateFontW
CreateFontA
GetCurrentPositionEx
PtInRegion
GetTextExtentPointW
GetTextCharacterExtra
GetMetaFileW
CreateEllipticRgnIndirect
GetCharWidthFloatA
GetEnhMetaFileDescriptionA
InvertRgn
GetTextCharset
ChoosePixelFormat
GetICMProfileA
CreateColorSpaceA
kernel32
GetConsoleCP
InterlockedIncrement
GetModuleFileNameW
HeapCreate
LocalHandle
SetComputerNameW
IsValidCodePage
GetSystemTimeAsFileTime
ConnectNamedPipe
CreateFileA
Sleep
QueryPerformanceCounter
LCMapStringW
FindFirstFileA
GetProfileSectionW
GetVersionExA
GlobalFlags
SetConsoleCP
SetConsoleActiveScreenBuffer
UnhandledExceptionFilter
GetDateFormatA
DuplicateHandle
GetCommandLineW
ExitProcess
GetConsoleOutputCP
CloseHandle
InitializeCriticalSection
GetLocaleInfoW
GlobalSize
GetCPInfo
WriteConsoleA
GetCurrentThread
WriteConsoleInputW
SetConsoleCursorPosition
GlobalFree
HeapSize
GetLongPathNameA
HeapValidate
GetPrivateProfileIntW
TlsGetValue
FindResourceA
SetFilePointer
GetLastError
WaitCommEvent
SetStdHandle
WritePrivateProfileSectionW
VirtualAlloc
WriteConsoleW
GetNamedPipeInfo
CompareStringW
GetProcAddress
HeapDestroy
EnterCriticalSection
GetThreadPriorityBoost
GlobalHandle
CreateFileMappingW
EnumSystemLocalesA
IsValidLocale
GetCurrentProcessId
GlobalAddAtomW
EnumResourceTypesW
GetThreadTimes
CopyFileExA
FreeLibrary
TlsSetValue
GetTimeFormatA
InterlockedExchange
LCMapStringA
GetStringTypeW
EnumDateFormatsExA
GetCurrentThreadId
GetFullPathNameW
FlushFileBuffers
HeapFree
ReadConsoleOutputAttribute
SetFileAttributesW
SetConsoleCtrlHandler
TerminateProcess
GetStdHandle
GetStartupInfoA
OutputDebugStringA
GetCurrentProcess
GetUserDefaultLCID
SystemTimeToTzSpecificLocalTime
LeaveCriticalSection
GetShortPathNameW
WriteFile
GetTickCount
GetModuleFileNameA
OpenMutexA
GlobalUnlock
InterlockedDecrement
GetCommandLineA
VirtualQuery
GetACP
SetEnvironmentVariableA
GetModuleHandleA
GetTimeZoneInformation
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SuspendThread
SetFileTime
GetCurrencyFormatA
GetFileType
HeapReAlloc
SetHandleCount
FreeLibraryAndExitThread
WriteProfileSectionA
GetLongPathNameW
IsDebuggerPresent
WritePrivateProfileStringW
GetEnvironmentStrings
LoadLibraryA
TerminateThread
WriteConsoleInputA
WideCharToMultiByte
GetConsoleMode
VirtualFree
GetOEMCP
CompareStringA
DeleteCriticalSection
HeapAlloc
GetSystemTimeAdjustment
GetConsoleScreenBufferInfo
SetUnhandledExceptionFilter
GetLocaleInfoA
EnumResourceLanguagesA
CreateFileW
FlushInstructionCache
GetEnvironmentVariableW
GetStringTypeA
TlsAlloc
GetSystemDefaultLCID
UnlockFile
TryEnterCriticalSection
ReadFile
CreateMutexA
TlsFree
OpenFile
FreeEnvironmentStringsA
RtlMoveMemory
SetLastError
GetProcessHeap
CreateThread
RtlUnwind
MultiByteToWideChar
comdlg32
GetSaveFileNameW
ChooseFontA
comctl32
DrawStatusTextW
CreateToolbar
ImageList_Read
CreatePropertySheetPageA
ImageList_SetIconSize
InitCommonControlsEx
ImageList_SetFlags
DrawStatusText
ImageList_AddMasked
Sections
.text Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ