Static task
static1
Behavioral task
behavioral1
Sample
4c89b245b19f42abd319bc70521ea2db.exe
Resource
win7-20231215-en
General
-
Target
4c89b245b19f42abd319bc70521ea2db
-
Size
9KB
-
MD5
4c89b245b19f42abd319bc70521ea2db
-
SHA1
2461d176d9a326da912a9c7c648fdc9cdca65290
-
SHA256
5c3d536569b66934f46949d81bc18fbc4f5dd60f72481cd51b6932dc85ee4d38
-
SHA512
fd21b5ec7374b9adbd775c388c5e4d140629d9de1b204ad37092242dac1dc215264c17b23e405fa1bfb55e012be03edda9e986bedc6ff75bb258b31f50acd2ec
-
SSDEEP
192:JtinEv9IbIjRvL0fdn4h+BjCbTEHmB9fGnVp5N4I8ZSMgKdAcnzPXO:Nfjv2jCP2e9fkpb4IMbgKDrXO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c89b245b19f42abd319bc70521ea2db
Files
-
4c89b245b19f42abd319bc70521ea2db.exe windows:4 windows x86 arch:x86
77fdaed4bb347e310cb90aed6dbd43ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateNamedPipeW
ExitProcess
FormatMessageA
GetCPInfo
GetDateFormatA
GetFileTime
GetLocalTime
GetLogicalDriveStringsA
GetProcessShutdownParameters
GetUserDefaultLCID
GetWriteWatch
LocalUnlock
OpenProfileUserMapping
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleOutputA
RequestWakeupLatency
SetConsoleWindowInfo
SetFilePointer
SetHandleCount
TerminateProcess
lstrcmpi
user32
BeginDeferWindowPos
CallWindowProcA
DdePostAdvise
DdeQueryStringW
DestroyMenu
DrawTextA
EnumDesktopsA
FlashWindowEx
FreeDDElParam
GetMessageA
GetPropW
LoadAcceleratorsA
LoadBitmapA
LoadIconW
MenuItemFromPoint
NotifyWinEvent
OpenDesktopA
ScrollDC
SetLastErrorEx
SetMenuDefaultItem
ShowWindow
UnhookWinEvent
UnregisterClassA
gdi32
CopyMetaFileW
CreateDIBPatternBrushPt
CreateDIBitmap
CreateHatchBrush
CreateMetaFileW
CreateRoundRectRgn
CreateScalableFontResourceA
ExcludeClipRect
FillPath
FlattenPath
GetBitmapDimensionEx
GetCharWidthFloatW
GetCharacterPlacementW
GetClipRgn
GetMetaRgn
GetObjectA
GetWindowExtEx
OffsetClipRgn
RemoveFontResourceW
SetBitmapBits
SetMiterLimit
TextOutA
Sections
.text Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ