Static task
static1
Behavioral task
behavioral1
Sample
4ccb6bcc93e756228473dff6e399f984.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4ccb6bcc93e756228473dff6e399f984.exe
Resource
win10v2004-20231215-en
General
-
Target
4ccb6bcc93e756228473dff6e399f984
-
Size
29KB
-
MD5
4ccb6bcc93e756228473dff6e399f984
-
SHA1
bf01545e9a6783db276175621f851b49df365e8f
-
SHA256
9b47c2413ad4325e56f941e8f226e2c7cd26a330dae96f61cef7688e20d95353
-
SHA512
d10618824a8177486bc478bbe9b74a7fd92e8e1602d0fbcb6d3f6b5cf401cd2f8f10993a31faef44137cd2355ed2c4bb75ca4bc9ed82e28819ecf2f223b61892
-
SSDEEP
384:TGsaVaNK73DVyIP+VPXDmj1/G662MtoOJ+BPJwKW:TGscsKDDVyImVPiBNbMGEGzW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ccb6bcc93e756228473dff6e399f984
Files
-
4ccb6bcc93e756228473dff6e399f984.exe windows:4 windows x86 arch:x86
53ee37f7bfa8f8e8a643794b0f7320ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
LCMapStringW
GetVersion
TerminateProcess
CreateFileA
lstrcpynW
GetModuleFileNameA
GetOEMCP
GetCurrentProcess
lstrcatA
LCMapStringA
SetFilePointer
GetStartupInfoA
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetStdHandle
GetStringTypeA
lstrcpynA
SetHandleCount
lstrcpyA
GetACP
GetCommandLineA
user32
CopyImage
CopyIcon
CopyRect
LoadMenuA
DrawIcon
GetWindowTextLengthA
CloseWindow
LoadCursorA
GetWindowTextA
IsMenu
DrawTextA
GetCursor
InsertMenuA
EndDialog
CreateIcon
GetFocus
DrawIconEx
DrawTextW
GetMenu
DialogBoxParamA
GetDlgItem
GetDC
IsWindow
DialogBoxParamW
comctl32
CreateMappedBitmap
CreateStatusWindow
ImageList_Copy
DrawStatusTextW
ImageList_LoadImageA
ImageList_AddIcon
MenuHelp
ImageList_DragEnter
ImageList_Draw
ImageList_EndDrag
advapi32
RegSetValueA
RegDeleteValueW
RegEnumValueA
RegEnumKeyW
RegCreateKeyExA
RegSetValueW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 17.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ