Static task
static1
Behavioral task
behavioral1
Sample
48fde7321cd2169a89cf9be8c792c3d2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48fde7321cd2169a89cf9be8c792c3d2.exe
Resource
win10v2004-20231222-en
General
-
Target
48fde7321cd2169a89cf9be8c792c3d2
-
Size
112KB
-
MD5
48fde7321cd2169a89cf9be8c792c3d2
-
SHA1
6e3575f389a6d872a65620f3b18a5e757b482564
-
SHA256
e8cd4d8fb93878ee64e67545a4761e9f1af7dda636e9c7bc45e2793b02ddf5c8
-
SHA512
58eb0a3cb39797328d48f33ccefd1ea10b91fde9642e3ab4580c72adbaf4d11a187ed5cb212d4b32834b53a70fc3eb056538671990635960ed381869eca85349
-
SSDEEP
1536:W+MgRI5+YY2nNqo4hjzoxaegQp5v5cORrtOanwNgm07ce9oMiFG:3d+5VY2nNqBoxWQp52ORrQWmPe9o5FG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48fde7321cd2169a89cf9be8c792c3d2
Files
-
48fde7321cd2169a89cf9be8c792c3d2.exe windows:4 windows x86 arch:x86
7545ba6c2006169c20bd486b09f64e08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
ReadFile
CreateFileA
DeviceIoControl
GetModuleHandleA
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEndOfFile
SetStdHandle
IsBadCodePtr
UnlockFile
Sleep
GetLastError
GetModuleFileNameA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
CreateProcessA
WaitForSingleObject
CloseHandle
CopyFileA
SetFileAttributesA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
lstrlenA
IsBadReadPtr
GetStringTypeW
GetStringTypeA
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
WriteFile
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
GetACP
GetOEMCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
gdi32
GetTextCharsetInfo
advapi32
DeleteService
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
ControlService
StartServiceA
QueryServiceStatus
CreateServiceA
ChangeServiceConfig2A
RegCreateKeyA
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeregisterEventSource
RegOpenKeyExA
RegCloseKey
ole32
CoUninitialize
CoGetClassObject
StringFromCLSID
CoInitialize
oleaut32
VariantClear
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ