Static task
static1
Behavioral task
behavioral1
Sample
4a99c2c88a36afc005c07c1ba68e023a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a99c2c88a36afc005c07c1ba68e023a.exe
Resource
win10v2004-20231222-en
General
-
Target
4a99c2c88a36afc005c07c1ba68e023a
-
Size
572KB
-
MD5
4a99c2c88a36afc005c07c1ba68e023a
-
SHA1
5b7a74ecab4b5d4bf31aac29c1d42882872842f6
-
SHA256
2109cc14eb147d2962627af604c89bd007e518164a66955b8f1af9f79fbdea5e
-
SHA512
0319353ada1c5694e1839b418b1b9109bbc5842f9ebc6df115bb81a589b63e53b4e53ce68a271b336b211c31c9d4dae4d877656f2b128e19a1fc8c77ecf7f6a5
-
SSDEEP
12288:j6rl/QZN1AFTfk2dMqVxgOk1aXb/53mv+E+QgukB4BjudCSGzP/z:j6rlIZNOTfk2dMIxm1aLR3G+QgGnSW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a99c2c88a36afc005c07c1ba68e023a
Files
-
4a99c2c88a36afc005c07c1ba68e023a.exe windows:4 windows x86 arch:x86
5e660a3fb055558cfc812ba61ace1ac9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
OemToCharBuffW
WINNLSEnableIME
DdeConnect
GetUpdateRgn
CharToOemBuffW
IsWindowEnabled
GetUpdateRect
LoadAcceleratorsA
SetDebugErrorLevel
GetCaretPos
MessageBoxA
CreatePopupMenu
GetPropW
CreateWindowStationA
DdeDisconnectList
GetMessageW
DefWindowProcA
ChangeDisplaySettingsExA
GetClassInfoExA
CharPrevExA
SetMenuItemInfoA
GetKeyboardLayoutNameW
WaitForInputIdle
RegisterClassExA
GetMenuItemCount
MessageBoxExW
GetMenuContextHelpId
IsWindowUnicode
CreateDialogParamW
LoadImageA
GetUserObjectInformationA
CreateIcon
OemToCharA
DestroyCursor
SetMenuInfo
SetWindowsHookW
DialogBoxParamW
RegisterClassA
LoadKeyboardLayoutA
DestroyWindow
CreateWindowExA
GetWindowThreadProcessId
DefMDIChildProcW
ShowWindow
SetScrollPos
UnhookWindowsHook
DdeImpersonateClient
LoadMenuA
EnumDisplaySettingsExA
IsCharUpperA
GetMonitorInfoW
MapWindowPoints
RegisterClassW
CreateDialogIndirectParamW
EnumDisplaySettingsW
GetTitleBarInfo
DdeAccessData
advapi32
RegCreateKeyExA
CryptEncrypt
CryptDuplicateHash
CryptGetDefaultProviderA
AbortSystemShutdownA
LookupAccountSidW
LookupAccountSidA
kernel32
FillConsoleOutputCharacterW
GetCurrentThreadId
ReadConsoleOutputW
HeapSize
HeapDestroy
GetLastError
EnumTimeFormatsW
GetProcAddress
GetLocaleInfoW
HeapValidate
OpenSemaphoreA
GetCommandLineA
GetUserDefaultLCID
GetNamedPipeHandleStateW
SetEnvironmentVariableA
InterlockedCompareExchange
VirtualQuery
GetFileType
GetProfileStringW
MoveFileExW
OutputDebugStringW
TlsGetValue
LCMapStringW
lstrcmp
GetEnvironmentStrings
GetCompressedFileSizeW
GetTimeZoneInformation
SetEnvironmentVariableW
ReadFile
WaitForSingleObjectEx
GetTimeFormatA
IsValidCodePage
InterlockedDecrement
GetStdHandle
GetDiskFreeSpaceExW
HeapAlloc
GetTickCount
GetOEMCP
GetModuleFileNameA
MoveFileA
GetPrivateProfileSectionNamesA
HeapReAlloc
UnhandledExceptionFilter
WritePrivateProfileStringA
EnterCriticalSection
HeapFree
LeaveCriticalSection
CreateFileW
DuplicateHandle
VirtualFree
GetDiskFreeSpaceExA
GetVersion
IsBadWritePtr
lstrlenA
FreeEnvironmentStringsW
TerminateProcess
SetConsoleCP
VirtualProtect
QueryPerformanceCounter
CloseHandle
TlsAlloc
HeapCreate
GetVersionExA
GetEnvironmentVariableA
OpenProcess
GetEnvironmentStringsW
InterlockedExchange
SetHandleCount
GetModuleHandleW
WideCharToMultiByte
WriteFile
GetSystemTimeAdjustment
GetStringTypeW
CreateMutexA
EnumSystemLocalesA
GetCurrentProcess
SetFilePointer
MultiByteToWideChar
CreateEventA
OpenMutexA
GetCurrentProcessId
DeleteCriticalSection
CompareStringA
ReleaseSemaphore
FindFirstFileExW
FlushFileBuffers
FreeEnvironmentStringsA
GetStringTypeA
TransactNamedPipe
lstrcpy
GetDriveTypeW
GetCPInfo
CompareStringW
GetLocaleInfoA
ReadConsoleOutputA
GetSystemTimeAsFileTime
ExitProcess
LoadLibraryW
SetStdHandle
lstrcpynW
GetDateFormatA
GetModuleHandleA
GetSystemInfo
GetShortPathNameW
GetACP
GetStartupInfoA
GlobalFree
SetSystemTime
WriteConsoleA
LCMapStringA
TlsSetValue
RtlUnwind
FillConsoleOutputCharacterA
IsValidLocale
GetProcessHeap
LoadLibraryA
SetLastError
VirtualAlloc
TlsFree
GetCurrentThread
ExpandEnvironmentStringsW
GetThreadPriority
GetCurrencyFormatW
InitializeCriticalSection
comdlg32
ChooseFontW
ChooseColorA
PageSetupDlgA
comctl32
ImageList_GetDragImage
ImageList_SetOverlayImage
DrawStatusTextA
ImageList_Merge
CreateStatusWindow
ImageList_Write
ImageList_GetIcon
DrawStatusTextW
InitCommonControlsEx
Sections
.text Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ