Static task
static1
Behavioral task
behavioral1
Sample
473fff4e53aa76793b6011ba62e0298c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
473fff4e53aa76793b6011ba62e0298c.exe
Resource
win10v2004-20231222-en
General
-
Target
473fff4e53aa76793b6011ba62e0298c.bin
-
Size
112KB
-
MD5
473fff4e53aa76793b6011ba62e0298c
-
SHA1
7fb40d7333d1a3272ddbfac15639bd9993dc81d8
-
SHA256
ebd2d1653a3347b7f261ebdf117c58d1b506989d66f188f86876599ca03cd103
-
SHA512
e0d6e05311bff65819d4d207875f21d971e1de5615b3e92854647ef5725fc542a5f0edf09f3e10b1ac01ba63d18cd502833f30a3c9c485f22c5c7f8208efe03d
-
SSDEEP
3072:uMbFzG8lGyPqyRmFR2DsDY+YMLlg2uJwlPUU/wM0lfK:xFFDqQmqDozXLxuJkUU/wLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 473fff4e53aa76793b6011ba62e0298c.bin
Files
-
473fff4e53aa76793b6011ba62e0298c.bin.exe windows:4 windows x86 arch:x86
f34a603265c425f6e6fdd0b080957065
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
gdi32
BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
DeleteDC
DeleteObject
ExtCreatePen
GetObjectA
GetPixel
GetStockObject
LineTo
MoveToEx
PolyBezier
SelectObject
SetBkColor
SetBkMode
SetTextAlign
SetTextColor
TextOutA
shell32
ShellExecuteA
Shell_NotifyIconA
user32
UnregisterClassA
TranslateMessage
TranslateAcceleratorA
ShowWindow
SetWindowTextA
SetWindowPos
SetWindowLongA
SetTimer
SetForegroundWindow
SetCapture
SendMessageA
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterClassExA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
MoveWindow
MessageBoxA
LoadStringA
UpdateWindow
LoadCursorA
LoadBitmapA
LoadAcceleratorsA
KillTimer
IsWindowVisible
IsIconic
InvalidateRect
GetWindowRect
GetWindowLongA
GetSystemMetrics
GetParent
GetMessageA
GetMenu
GetForegroundWindow
GetFocus
GetDlgItem
GetDC
GetClientRect
FillRect
EndPaint
EndDialog
DrawTextA
DispatchMessageA
DialogBoxParamA
DefWindowProcA
CreateWindowExA
CheckMenuItem
BeginPaint
LoadIconA
wsprintfA
SetFocus
setupapi
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
kernel32
lstrlenA
lstrcpyA
lstrcmpiA
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TerminateThread
TerminateProcess
SetUnhandledExceptionFilter
SetStdHandle
SetHandleCount
SetFilePointer
RtlUnwind
MultiByteToWideChar
LoadLibraryA
LCMapStringA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExA
GetVersion
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFileType
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
ExitProcess
DeviceIoControl
CreateThread
CreateFileA
CreateEventA
CloseHandle
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ