Static task
static1
Behavioral task
behavioral1
Sample
4a8f7c4866fbb780fb2e696a595707ef.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4a8f7c4866fbb780fb2e696a595707ef.exe
Resource
win10v2004-20231222-en
General
-
Target
4a8f7c4866fbb780fb2e696a595707ef
-
Size
20KB
-
MD5
4a8f7c4866fbb780fb2e696a595707ef
-
SHA1
2af0108e15526073a12d82c6099fff78bf1dfdc8
-
SHA256
d3a34b4c24c9aa2dc1a7e946d4afdccd8b87493bbd0a91986953ce5863d6810f
-
SHA512
a24757e23b3e6204a8292eb62c1ddbfc701c46b08a47c9115721dc6587a67eaec709ba7633b5f814f363bf27fdcf42cdcf32fc655ea3d464fd9c26dc5d519f9f
-
SSDEEP
384:hAwWWTWTQxWkh7D7UTw6AlT+WymHDASUeDl0:hAwWWTWTOW8v7UTyiWy+Ur
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a8f7c4866fbb780fb2e696a595707ef
Files
-
4a8f7c4866fbb780fb2e696a595707ef.exe windows:4 windows x86 arch:x86
5f1cff16ac72000a3f69f7c3ad4182b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetCurrentProcessId
IsDBCSLeadByte
TlsAlloc
GetLogicalDrives
GetCurrentThread
TlsSetValue
lstrcmpA
GetDriveTypeW
lstrcatA
GetCurrentProcess
GetModuleHandleW
TlsGetValue
TlsFree
GetModuleFileNameA
GetCommandLineA
FreeLibrary
GetCurrentThreadId
GetSystemDefaultLangID
Sleep
GetACP
user32
UpdateWindow
GetWindow
RegisterClassA
GetWindowDC
ShowWindow
GetDC
GetWindowTextA
BeginPaint
IsWindowVisible
IsIconic
CreateWindowExA
GetWindowTextLengthA
GetActiveWindow
GetWindowLongA
GetClassLongA
ReleaseDC
GetSystemMetrics
GetFocus
GetForegroundWindow
advapi32
RegOpenKeyExA
GetUserNameA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
IsTextUnicode
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
VerLanguageNameA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ