Static task
static1
Behavioral task
behavioral1
Sample
4c888f1f644b2468a69a52662153b5ce.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c888f1f644b2468a69a52662153b5ce.exe
Resource
win10v2004-20231222-en
General
-
Target
4c888f1f644b2468a69a52662153b5ce
-
Size
1.6MB
-
MD5
4c888f1f644b2468a69a52662153b5ce
-
SHA1
885b21a3c0fbff3867e0a4fbf5c5b145cf3d3e7d
-
SHA256
bb55ff8b79416b96673b7d006197a811cf5521558aedf56f9e7a9341d7502217
-
SHA512
8a039a96fb90638ad4ead7b1c42dd3b34949ba48893a0f10af14e2b1277057f37a9df23e5c8ed6ac153a22a22f4133b59743c54f530bf8d54ffd9640620c7fbf
-
SSDEEP
12288:1P3XxUCkmJA79xLOuiAI82pEXZZCk8k8k8k:1Pnx5kmJEz6rEpZbFFF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c888f1f644b2468a69a52662153b5ce
Files
-
4c888f1f644b2468a69a52662153b5ce.exe windows:4 windows x86 arch:x86
1d04b61bdd4830b29d52e30b9113a357
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetSystemTime
LocalAlloc
GetProcAddress
LoadLibraryA
WideCharToMultiByte
RtlUnwind
RaiseException
ExitProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetCPInfo
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
LCMapStringA
GetLastError
LCMapStringW
DebugBreak
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetFilePointer
FlushFileBuffers
CloseHandle
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
IsBadCodePtr
VirtualProtect
GetSystemInfo
VirtualQuery
SetConsoleCtrlHandler
GetProcessHeap
FreeLibrary
InterlockedExchange
GetACP
GetOEMCP
ReadFile
SetStdHandle
GetTimeFormatA
GetDateFormatA
GetLocaleInfoW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 276KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ