Static task
static1
Behavioral task
behavioral1
Sample
485fc03d165cea1913a577bb751398e1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
485fc03d165cea1913a577bb751398e1.exe
Resource
win10v2004-20231215-en
General
-
Target
485fc03d165cea1913a577bb751398e1
-
Size
155KB
-
MD5
485fc03d165cea1913a577bb751398e1
-
SHA1
9b342fa05938997b21a4f69ccbf8d80fea6c40b0
-
SHA256
ef53ae78727c81371ed7f249b2cc477f9f58841b9de7802963a0e93d7b393e53
-
SHA512
fb90d80cd2643dbe06c17de5fd6155abd9dc985c6abdf85d45724aeb0ea402498c2619b1b7c35e22d99c7044e77788ce2566bf56464ceb230acc1b5c4254f21f
-
SSDEEP
3072:ixxjpl71jgRvXJsDbdDF64zydJ6W0bugIO0qrcru:ixJpkX2DxDF64A6UUhc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 485fc03d165cea1913a577bb751398e1
Files
-
485fc03d165cea1913a577bb751398e1.exe windows:4 windows x86 arch:x86
01a7973577aff434a86166fa299ac779
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringA
CompareStringW
CreateFileA
CreateProcessW
CreateThread
DeleteFileW
DisableThreadLibraryCalls
DuplicateHandle
ExitProcess
FindNextFileA
FindNextFileW
FindResourceA
FindResourceW
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineA
GetConsoleOutputCP
GetCurrentThread
GetDateFormatA
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesW
GetFileSize
GetFileType
GetFullPathNameA
GetLocaleInfoA
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetShortPathNameA
GetStartupInfoW
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemTime
GetTempPathA
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVersionExW
GlobalAddAtomA
GlobalLock
HeapAlloc
HeapCreate
HeapDestroy
InterlockedCompareExchange
IsBadCodePtr
IsDBCSLeadByte
LCMapStringA
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
MoveFileA
ReleaseMutex
ResumeThread
SetEnvironmentVariableA
SetEvent
SetFileAttributesW
Sleep
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WritePrivateProfileStringA
lstrcmpA
lstrcmpiA
user32
CharNextA
CreatePopupMenu
CreateWindowExA
DestroyCursor
DestroyIcon
DialogBoxParamA
DrawEdge
DrawFrameControl
DrawIcon
DrawTextA
EmptyClipboard
EnableWindow
EndDialog
EndPaint
GetCapture
GetDC
GetDCEx
GetKeyState
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
GetMessagePos
GetPropA
GetWindowLongA
GetWindowRect
GetWindowTextA
InsertMenuItemA
IntersectRect
IsChild
IsDialogMessageA
IsWindow
IsWindowVisible
IsZoomed
LoadIconA
MapWindowPoints
MessageBoxA
OffsetRect
PostMessageA
RegisterClassA
RegisterClipboardFormatA
ScreenToClient
SendDlgItemMessageA
SetActiveWindow
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetWindowPos
SetWindowTextA
ShowCursor
ShowWindow
TrackPopupMenu
UpdateWindow
WindowFromPoint
wsprintfA
gdi32
AbortDoc
AddFontResourceA
Arc
BeginPath
CloseMetaFile
CopyMetaFileA
CreateBrushIndirect
CreateCompatibleBitmap
CreateDCA
CreateDCW
CreateDIBPatternBrushPt
CreateDIBSection
CreateFontIndirectW
CreateICA
CreatePatternBrush
CreatePolygonRgn
CreateSolidBrush
DeleteEnhMetaFile
Ellipse
EndPage
EndPath
EnumEnhMetaFile
Escape
ExcludeClipRect
ExtFloodFill
GetDCOrgEx
GetDIBColorTable
GetEnhMetaFileBits
GetMetaFileBitsEx
GetObjectA
GetOutlineTextMetricsA
GetPaletteEntries
GetPixel
GetStretchBltMode
GetTextColor
GetWinMetaFileBits
LineDDA
LineTo
MaskBlt
OffsetClipRgn
OffsetRgn
Pie
PlayEnhMetaFile
PolyBezierTo
PolyDraw
Polygon
RectInRegion
Rectangle
ScaleViewportExtEx
SelectClipRgn
SelectPalette
SetAbortProc
SetBkColor
SetBrushOrgEx
SetColorAdjustment
SetDIBitsToDevice
SetEnhMetaFileBits
SetMapMode
SetMetaFileBitsEx
SetStretchBltMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetViewportExtEx
SetWindowExtEx
StartPage
StrokeAndFillPath
StrokePath
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ