Static task
static1
Behavioral task
behavioral1
Sample
4adedfec826fa3c887ef808214576417.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4adedfec826fa3c887ef808214576417.exe
Resource
win10v2004-20231222-en
General
-
Target
4adedfec826fa3c887ef808214576417
-
Size
172KB
-
MD5
4adedfec826fa3c887ef808214576417
-
SHA1
6120c63010844dba6b0047139c3c9bbaee86eca2
-
SHA256
d511ea6909d62f8d576cfd636eceb2fe96ed862d2d588e087c6c9e26e011c47c
-
SHA512
bf56baa7a2255cb01b4fa1d4277da3458c3fd98ec8e3006df14a47c0371c6dab894368284131657ed43feaff977b4d04d2a86e2282083e698fb8215b2345e631
-
SSDEEP
3072:dXt+VV3B9ZDASxi+yVd+llV8+9h/AZdv3feYjAeqW4WHFYK:C9ZHM+O+nU3feYmHoFH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4adedfec826fa3c887ef808214576417
Files
-
4adedfec826fa3c887ef808214576417.exe windows:4 windows x86 arch:x86
04ab4c5997e5002d140dc6e6e093cd25
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleScreenBufferSize
WaitForSingleObject
GetModuleHandleW
GetCurrentDirectoryA
OpenEventA
OpenSemaphoreA
GetNamedPipeHandleStateA
GetProfileStringA
BackupSeek
user32
GetDCEx
GetCursorPos
CascadeWindows
EnumPropsW
SetWindowPos
ToAscii
InsertMenuItemA
LoadBitmapA
RegisterClipboardFormatW
CreateIcon
gdi32
GetEnhMetaFileW
DPtoLP
GetCurrentPositionEx
GetEnhMetaFilePixelFormat
SetWorldTransform
GetCharABCWidthsFloatA
IntersectClipRect
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 846B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE