Static task
static1
Behavioral task
behavioral1
Sample
4887e6c2f6071ddb738a43cd6154cb06.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4887e6c2f6071ddb738a43cd6154cb06.exe
Resource
win10v2004-20231215-en
General
-
Target
4887e6c2f6071ddb738a43cd6154cb06
-
Size
125KB
-
MD5
4887e6c2f6071ddb738a43cd6154cb06
-
SHA1
5df0de1bc3d2162c7d4f7c6a425f5fd306f663c0
-
SHA256
54eb301727af5879a11cb7ab2807255bb30d61429e5a77c480c66309ba4bc137
-
SHA512
35172dff65c349598550e8b43a672ee9fe48cd1aff3e886cb373615ac6b3aef9ef3bcff675370564a93780cfad2126fb12d7e07418da04f705c9e6187174c14b
-
SSDEEP
1536:u4L3VE9HpLxsx/SajmVKUN8bBOYVPwV+2ZJea8+lr4n3ciLEB:ug+9HpalSajmVAQYVoVFZJeDocnM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4887e6c2f6071ddb738a43cd6154cb06
Files
-
4887e6c2f6071ddb738a43cd6154cb06.exe windows:5 windows x86 arch:x86
b5fc9f43cec3c84a808dc4b37a32e8a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
wcslen
__getmainargs
_acmdln
exit
_XcptFilter
_exit
atoi
_initterm
wcschr
wcsrchr
free
malloc
advapi32
RegDeleteValueW
RegCreateKeyExW
RegCreateKeyW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
kernel32
_lclose
GetLocaleInfoW
LocalReAlloc
CreateFileW
FreeLibrary
IsBadCodePtr
GetVersionExW
MulDiv
SetEvent
WaitForSingleObject
GetPrivateProfileStringW
GetTickCount
GlobalGetAtomNameW
GetFileAttributesW
lstrcpynW
SetErrorMode
GlobalAddAtomW
GlobalDeleteAtom
GetModuleHandleA
GetStartupInfoA
ExitThread
GetProfileIntW
CreateProcessW
CreateThread
CloseHandle
lstrcmpiW
LoadLibraryW
ExitProcess
SearchPathW
lstrcatW
GetDriveTypeW
WideCharToMultiByte
FormatMessageW
GetCurrentThreadId
GetProcAddress
MultiByteToWideChar
lstrlenW
lstrcmpW
GlobalSize
GlobalAlloc
GlobalFree
GlobalLock
GetLastError
GlobalUnlock
LocalFree
LocalAlloc
lstrcpyW
ReadFile
Sleep
GetProfileStringW
GetACP
CreateEventW
LoadLibraryA
gdi32
CreateMetaFileW
ExcludeClipRect
CloseMetaFile
GetPaletteEntries
CreatePalette
SaveDC
RealizePalette
RestoreDC
GetDIBits
GetSystemPaletteEntries
GetSystemPaletteUse
SetBkColor
StretchDIBits
SetStretchBltMode
TextOutW
GetROP2
SetROP2
GetBkMode
SetBkMode
Rectangle
CreateCompatibleDC
StretchBlt
DeleteDC
CreateFontIndirectW
SelectPalette
GetObjectW
GetDeviceCaps
GetTextExtentPoint32W
CreateBitmap
CreatePatternBrush
DeleteMetaFile
CreateSolidBrush
DeleteObject
GetStockObject
SelectObject
SetTextColor
SetMapMode
SetViewportOrgEx
SetViewportExtEx
SetWindowOrgEx
SetWindowExtEx
CreatePen
PatBlt
MoveToEx
LineTo
CreateCompatibleBitmap
Polygon
user32
GetWindowTextW
KillTimer
ReleaseCapture
DefWindowProcW
EndPaint
FillRect
GetSysColor
GetClientRect
BeginPaint
RegisterClassW
LoadCursorW
wsprintfW
CallWindowProcW
PostMessageW
GetParent
ClientToScreen
DialogBoxParamW
WinHelpW
GetDlgCtrlID
SetWindowTextW
LoadStringW
SetDlgItemInt
MessageBeep
GetFocus
CheckRadioButton
EndDialog
GetDlgItemInt
IsDlgButtonChecked
SetFocus
GetDlgItem
SetWindowLongW
CheckDlgButton
SendDlgItemMessageW
SetDlgItemTextW
GetDlgItemTextW
MapWindowPoints
OffsetRect
DrawMenuBar
ModifyMenuW
IntersectRect
GetWindow
IsWindow
CharPrevW
GetWindowThreadProcessId
GetKeyState
GetAsyncKeyState
SetWindowPos
SetParent
wsprintfA
IsIconic
SetCursor
SetActiveWindow
BringWindowToTop
AdjustWindowRect
SetRect
GetSystemMetrics
IsRectEmpty
GetActiveWindow
ShowWindow
EnableMenuItem
GetMenu
IsWindowVisible
MessageBoxW
EnableWindow
CopyRect
GetWindowRect
DestroyWindow
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRect
MoveWindow
InflateRect
UpdateWindow
FindWindowW
LoadIconW
CopyAcceleratorTableW
LoadAcceleratorsW
GetSubMenu
LoadMenuW
SystemParametersInfoW
DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjects
SetForegroundWindow
SetRectEmpty
SetMenu
CharLowerBuffW
InsertMenuW
DeleteMenu
GetWindowPlacement
DestroyMenu
CreateMenu
RemoveMenu
GetMenuItemCount
GetDesktopWindow
CheckMenuItem
EqualRect
FrameRect
DrawIcon
DrawTextW
UnhookWindowsHook
TranslateMessage
TranslateAcceleratorW
GetMessageW
SetWindowsHookW
IsWindowEnabled
RedrawWindow
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
LoadImageW
IsZoomed
PostQuitMessage
RegisterDeviceNotificationW
UnregisterDeviceNotification
DestroyIcon
RegisterClipboardFormatW
GetClassNameW
ShowCursor
ReleaseDC
ValidateRect
GetWindowLongW
SendMessageW
SetTimer
GetMessagePos
PtInRect
GetDialogBaseUnits
wvsprintfW
InvertRect
CreateWindowExW
ScreenToClient
GetDC
SetCapture
comctl32
CreateStatusWindowW
ord17
CreateToolbarEx
winmm
OpenDriver
CloseDriver
mciSendStringW
mciSendCommandW
sndPlaySoundW
mciGetErrorStringW
shell32
SHGetFileInfoW
ExtractIconW
DragAcceptFiles
DragFinish
DragQueryFileW
ShellAboutW
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE