Static task
static1
Behavioral task
behavioral1
Sample
4a880f0c76db0b38bf01b232c81f633a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a880f0c76db0b38bf01b232c81f633a.exe
Resource
win10v2004-20231215-en
General
-
Target
4a880f0c76db0b38bf01b232c81f633a
-
Size
32KB
-
MD5
4a880f0c76db0b38bf01b232c81f633a
-
SHA1
50a79a32d484c5fc41156ea443b80e55af99873f
-
SHA256
c6a7c934dfeb4c72096332d9249a6524b745b8857b70eac70fd2609860bed0f0
-
SHA512
b17ae34d1d7c7840f15d47bd5491f99973eab7af81cb4df94d67c85eda67c5f5791662e8bb14ae3ae34b6cdf5e128c8754bb41ad7af2497ab3f4f4f7f60e1aaf
-
SSDEEP
768:N8bxoHjzI1ZHq0nMJ6QTR4mwmviYQhzQX:N8bxoHjEXBnuq6vMz6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a880f0c76db0b38bf01b232c81f633a
Files
-
4a880f0c76db0b38bf01b232c81f633a.exe windows:4 windows x86 arch:x86
0c9c2c103bd3615787e5dbc639e31575
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetBrushOrgEx
ClearBrushAttributes
GetPixel
BitBlt
CreateSolidBrush
GetCurrentPositionEx
AddFontResourceA
AddFontResourceExA
AddFontResourceTracking
GetDCOrgEx
CopyMetaFileA
AbortPath
BeginPath
AddFontResourceW
GetClipBox
CloseMetaFile
ClearBitmapAttributes
ExcludeClipRect
SetTextColor
GetCurrentPositionEx
GetBrushOrgEx
ExtTextOutA
AddFontResourceExA
GetPixel
BitBlt
AddFontMemResourceEx
DeleteDC
CopyMetaFileA
CloseMetaFile
GetClipBox
AbortPath
AddFontResourceA
DeleteObject
GetPixel
GetPixel
GetBrushOrgEx
CloseMetaFile
AbortPath
ExtTextOutA
GetClipBox
DeleteObject
ClearBrushAttributes
CreateSolidBrush
GetDCOrgEx
CancelDC
DeleteDC
AddFontMemResourceEx
GetPixel
ExcludeClipRect
GetCurrentPositionEx
AddFontResourceExA
SetTextColor
CopyMetaFileA
ClearBitmapAttributes
BeginPath
BitBlt
advapi32
RegOpenKeyW
RegEnumKeyExA
RegEnumValueA
RegLoadKeyA
RegCreateKeyW
RegEnumValueW
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyW
RegQueryValueW
RegQueryValueExW
RegDeleteKeyA
RegReplaceKeyA
RegFlushKey
RegQueryInfoKeyW
RegGetKeySecurity
RegDeleteValueW
RegQueryValueA
RegOpenKeyExA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueW
RegEnumKeyA
RegQueryValueExA
RegOpenKeyExA
RegGetKeySecurity
RegCreateKeyExW
RegReplaceKeyW
RegLoadKeyW
RegQueryValueA
RegEnumKeyExA
RegCreateKeyExA
RegLoadKeyA
RegEnumKeyExW
kernel32
GetCPInfo
ReadConsoleA
CopyFileA
ExitThread
OpenFile
DeleteFileA
GetConsoleMode
GetFileSize
OpenFileMappingA
CreateProcessA
GetStdHandle
GlobalFree
GetCommandLineA
DeleteAtom
CopyFileExA
GetLastError
FindFirstFileA
CopyFileW
DeleteFileW
ReadFile
GetComputerNameA
WriteFile
CreateDirectoryA
FindAtomA
GetFileSize
ExitThread
FindFirstFileA
WriteFile
CreateThread
OpenFileMappingA
GetComputerNameA
SetLastError
FindAtomA
OpenFile
GlobalFree
DeleteFileW
CopyFileW
DeleteFileA
ReadFile
GetCommandLineA
GlobalFree
CopyFileExA
CopyFileExW
WriteFile
DeleteAtom
DeleteFileW
CreateProcessA
CopyFileW
FindFirstFileA
GetStdHandle
CreateThread
GetLastError
GetComputerNameA
ReadFile
GetCPInfo
user32
AppendMenuW
CopyImage
CalcMenuBar
GetDlgItem
IsMenu
DrawTextW
AppendMenuA
GetCursor
DrawTextA
AlignRects
DialogBoxParamW
EndDialog
CopyIcon
GetWindowTextLengthA
GetFocus
DrawIcon
CopyRect
BlockInput
InsertMenuA
GetDC
CreateIcon
GetWindowTextA
DialogBoxParamA
LoadMenuA
DialogBoxParamA
CalcMenuBar
DrawIcon
DrawTextW
GetCursor
LoadCursorA
CopyIcon
AppendMenuA
GetFocus
AlignRects
InsertMenuA
AppendMenuW
IsMenu
CopyRect
EndDialog
DialogBoxParamW
GetWindowTextA
DrawTextA
GetWindowTextLengthA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ