Static task
static1
Behavioral task
behavioral1
Sample
4a69388429a2fef9e3a04879385ad65b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a69388429a2fef9e3a04879385ad65b.exe
Resource
win10v2004-20231222-en
General
-
Target
4a69388429a2fef9e3a04879385ad65b
-
Size
446KB
-
MD5
4a69388429a2fef9e3a04879385ad65b
-
SHA1
83fe04502a93832ec5b73b67f3fc372a419a4af2
-
SHA256
b780cfa96fbce4ec134563b7a18a8ecf3cb9617db3ebbeee5c07c98488659134
-
SHA512
8d67a66eadb41c14b37dc3fa6451f0d631f86561098960b5a1edcc9db9c2203c32825cad833560ba7c598f59b2279248ba74969ad7bc3780874dc4b4199c9f24
-
SSDEEP
12288:gwxPNipse98Rp+H1VdEsMubom25SeEumH4EZc45JBNeYFP:gM2se+Rpu6V4om2bhmH4vkJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a69388429a2fef9e3a04879385ad65b
Files
-
4a69388429a2fef9e3a04879385ad65b.exe windows:4 windows x86 arch:x86
0a9aef926d3bca76f52cb2acd9dd6c61
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
Chord
PolyBezierTo
SetColorSpace
SetICMMode
CreateFontIndirectW
GetTextExtentExPointW
LPtoDP
GetCharABCWidthsFloatW
SetICMProfileW
GetCurrentObject
DeleteEnhMetaFile
GetGraphicsMode
GetLogColorSpaceW
AddFontResourceA
GdiPlayJournal
CheckColorsInGamut
shell32
ExtractAssociatedIconA
RealShellExecuteW
SHAddToRecentDocs
ExtractAssociatedIconExW
ShellExecuteW
SHGetDataFromIDListA
RealShellExecuteExA
SHFileOperation
ExtractAssociatedIconExA
SheChangeDirA
ExtractIconA
DoEnvironmentSubstW
FindExecutableW
SHFileOperationW
SHFreeNameMappings
RealShellExecuteA
DuplicateIcon
SHBrowseForFolder
ShellAboutW
SHAppBarMessage
ShellHookProc
SHGetDesktopFolder
ShellExecuteExA
DragQueryFile
advapi32
RegQueryValueW
CryptSetHashParam
CryptDuplicateKey
CryptVerifySignatureW
ReportEventA
LookupPrivilegeValueW
CryptImportKey
RegSaveKeyA
InitiateSystemShutdownA
CryptEncrypt
RegDeleteKeyA
RegSetValueW
GetUserNameW
LookupPrivilegeNameW
LookupSecurityDescriptorPartsW
RegLoadKeyW
LookupPrivilegeDisplayNameW
RegEnumValueW
user32
GetDlgItem
IsDialogMessageA
MonitorFromPoint
RealGetWindowClass
CopyAcceleratorTableW
UnhookWinEvent
RegisterClassW
GetMenuItemInfoA
SetClassLongA
SetDlgItemTextA
EnumDisplaySettingsExW
CharToOemBuffA
LoadIconW
wsprintfA
DlgDirSelectExW
CreateCaret
GetSysColor
SystemParametersInfoW
DdeConnect
DdeAddData
kernel32
SetLastError
TerminateProcess
SetEnvironmentVariableA
GetStringTypeA
InterlockedExchange
InitializeCriticalSection
GetDateFormatA
LCMapStringW
IsValidCodePage
GetFileType
GetPrivateProfileIntW
TlsGetValue
QueryPerformanceCounter
GetModuleFileNameW
GetCurrentThreadId
GetSystemInfo
GetCPInfo
GetStartupInfoA
IsValidLocale
GetTimeFormatA
GetCurrentThread
VirtualFree
GetVersionExA
IsBadWritePtr
GetLastError
GetStringTypeW
HeapAlloc
GetEnvironmentStringsW
LCMapStringA
GetLocaleInfoA
HeapDestroy
TlsFree
RtlUnwind
HeapCreate
VirtualAlloc
VirtualQuery
GetOEMCP
GetLocaleInfoW
TlsAlloc
CompareStringA
OpenMutexW
UnhandledExceptionFilter
CompareStringW
GetModuleFileNameA
GetSystemTime
DeleteCriticalSection
GetACP
VirtualProtect
GetCurrentProcess
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleA
LeaveCriticalSection
WideCharToMultiByte
FreeLibrary
SetHandleCount
EnumSystemLocalesA
FreeEnvironmentStringsW
GetTimeZoneInformation
HeapFree
HeapReAlloc
SetCriticalSectionSpinCount
GetStartupInfoW
LoadLibraryA
GetUserDefaultLCID
EnterCriticalSection
FreeEnvironmentStringsA
GetProcAddress
GetCommandLineA
ExitProcess
HeapSize
GetStdHandle
MultiByteToWideChar
WriteFile
GetCurrentProcessId
GetCommandLineW
TlsSetValue
GetEnvironmentStrings
wininet
UpdateUrlCacheContentPath
IsUrlCacheEntryExpiredA
FindNextUrlCacheEntryW
GopherGetLocatorTypeA
SetUrlCacheEntryInfoW
DeleteUrlCacheEntry
InternetSetDialStateW
GetUrlCacheGroupAttributeW
Sections
.text Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 273KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ