Static task
static1
Behavioral task
behavioral1
Sample
4947b7f1379471b9bfa4ee126d60793a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4947b7f1379471b9bfa4ee126d60793a.exe
Resource
win10v2004-20231215-en
General
-
Target
4947b7f1379471b9bfa4ee126d60793a
-
Size
43KB
-
MD5
4947b7f1379471b9bfa4ee126d60793a
-
SHA1
2b90a1498a4ce18b787189e3218953f513ade59f
-
SHA256
856c1b69df554f4ad7d99ad7033871096ce8b694586f9a9207c1bb4794af870d
-
SHA512
dd34c3ec3f4f762093a6e23c7fdcd676bd82a21cc36e10f7f46439c408d0f74f5b784c0b52464c3b685fef9dafec8a4187e48423df079979ea7e73773ce3d3cb
-
SSDEEP
768:zBcZRE40FrOQrObAPBaiChZHX+fyGArEoE8N8wk9MPHsJz9IES1U5GPlycg0QNM:VcHE42prObt3PGArX3Ou0Jz9I0QPUXM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4947b7f1379471b9bfa4ee126d60793a
Files
-
4947b7f1379471b9bfa4ee126d60793a.exe windows:1 windows x86 arch:x86
32606860559b7619026dea578d79f93b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AreFileApisANSI
BackupWrite
CompareStringW
CreateDirectoryExW
CreateToolhelp32Snapshot
DeleteFileW
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FreeEnvironmentStringsW
GetCPInfoExW
GetCurrentThreadId
GetDiskFreeSpaceExA
GetExitCodeProcess
GetFullPathNameW
GetLocalTime
GetNamedPipeHandleStateW
GetProcessPriorityBoost
Heap32ListNext
PulseEvent
SetHandleInformation
SetWaitableTimer
lstrcpynA
user32
ActivateKeyboardLayout
CharToOemA
CharUpperW
CreateIconFromResourceEx
DefFrameProcW
DragObject
DrawAnimatedRects
EnableWindow
EnumDesktopsA
EnumWindowStationsW
GetActiveWindow
GetAncestor
GetClassNameW
GetInputDesktop
GetKeyboardLayoutNameA
GrayStringW
IMPGetIMEA
InSendMessage
InSendMessageEx
IsIconic
IsWindow
MapDialogRect
MessageBoxA
MonitorFromPoint
RealGetWindowClass
RedrawWindow
SetCapture
SetMenuDefaultItem
SetPropW
TrackPopupMenu
gdi32
AbortPath
Chord
CreateFontA
CreateScalableFontResourceW
EnumFontsA
FillRgn
GetAspectRatioFilterEx
GetBoundsRect
GetBrushOrgEx
GetCharWidthFloatA
GetCurrentPositionEx
GetGraphicsMode
GetKerningPairsA
GetNearestPaletteIndex
GetPolyFillMode
GetRgnBox
GetTextCharsetInfo
PlayEnhMetaFile
PolyDraw
SetBitmapDimensionEx
SetBoundsRect
SetColorAdjustment
SetICMMode
SetLayout
SetMetaRgn
SetPixelFormat
SetROP2
SetSystemPaletteUse
SwapBuffers
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE