Static task
static1
Behavioral task
behavioral1
Sample
4b75c090443fed81f58dc393e2c4146c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b75c090443fed81f58dc393e2c4146c.exe
Resource
win10v2004-20231222-en
General
-
Target
4b75c090443fed81f58dc393e2c4146c
-
Size
728KB
-
MD5
4b75c090443fed81f58dc393e2c4146c
-
SHA1
ddf3ea2c300c0a9d2ed2e8b65e76401f7b6a080d
-
SHA256
33a113e7017c079b2d983b78fa94767b2a60750817e02efc4211df42fcfc0c60
-
SHA512
722662a5639f4b5195238ca88c65f5181f98a3db5f866ae38fed1b23fdd12778b7fa08bb568890283bd8ddf4abd8901fff01d4a0ad7785d6a3d708043a334127
-
SSDEEP
12288:bbwGoCYh7LdP8ypWHBoZkNP172Y1AaCAqKfyzynXDoE+k9Q0+iIPGUIiYAJqj1eL:wGo91dPJ8HCW95ANAdXDoE+AQ0+ivUPh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b75c090443fed81f58dc393e2c4146c
Files
-
4b75c090443fed81f58dc393e2c4146c.exe windows:4 windows x86 arch:x86
f97a54971fb80b1e56c9344cac0539b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitMUILanguage
ImageList_Draw
ImageList_GetImageCount
ImageList_SetIconSize
ImageList_Write
CreatePropertySheetPage
InitCommonControlsEx
kernel32
GetCPInfo
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetCurrentThreadId
CompareStringA
VirtualFree
FreeLibrary
CreateFileA
GetEnvironmentStringsW
MultiByteToWideChar
EnterCriticalSection
OpenMutexA
GetModuleHandleW
ExitProcess
SetFilePointer
IsValidCodePage
FlushFileBuffers
WriteConsoleA
UnhandledExceptionFilter
VirtualQuery
QueryPerformanceCounter
GetProcAddress
ReadConsoleW
GetOEMCP
HeapAlloc
WideCharToMultiByte
LoadLibraryA
GetConsoleMode
lstrlenW
InterlockedDecrement
GetLastError
GetModuleFileNameW
GetUserDefaultLCID
HeapDestroy
GetModuleFileNameA
SetStdHandle
FreeEnvironmentStringsW
HeapSize
IsBadReadPtr
CompareFileTime
TlsGetValue
SetEnvironmentVariableA
CompareStringW
TlsSetValue
InterlockedExchange
HeapCreate
ReadFile
GetStringTypeA
IsValidLocale
TlsFree
SetUnhandledExceptionFilter
Sleep
HeapReAlloc
WriteConsoleW
RtlUnwind
GetProcessHeap
GetSystemTimeAsFileTime
RaiseException
FillConsoleOutputAttribute
TerminateProcess
SetHandleCount
LoadLibraryW
LCMapStringW
GetCurrentProcess
VirtualAlloc
lstrlenA
GetTimeZoneInformation
LeaveCriticalSection
GetTimeFormatA
OutputDebugStringW
SetLastError
LocalFlags
HeapValidate
IsDebuggerPresent
WriteConsoleOutputAttribute
DebugBreak
GetTickCount
GetStdHandle
GetStringTypeW
GetStartupInfoA
OutputDebugStringA
GetFileType
GetConsoleOutputCP
GetModuleHandleA
EnumSystemLocalesA
GetLocaleInfoA
GetDateFormatA
CloseHandle
TlsAlloc
GetCommandLineA
HeapFree
CreateMutexA
DeleteCriticalSection
GetTempPathW
LCMapStringA
GetACP
CreateMutexW
GetPrivateProfileStructA
WriteFile
InterlockedIncrement
GetCurrentThread
GetCommandLineW
GetConsoleCP
GetStartupInfoW
SetConsoleCtrlHandler
GetLocaleInfoW
user32
SetSystemCursor
RealGetWindowClass
SetMenuItemBitmaps
DestroyWindow
GetWindowPlacement
CheckRadioButton
DlgDirSelectExA
NotifyWinEvent
SetDlgItemTextA
RegisterClassA
LockWindowUpdate
IsCharAlphaNumericA
GetClientRect
MessageBoxW
CharLowerA
LoadMenuIndirectA
SetDoubleClickTime
MapVirtualKeyA
WaitForInputIdle
SetScrollRange
DialogBoxParamA
RemovePropA
CharPrevA
IsDialogMessageW
DlgDirListComboBoxA
GetMenuInfo
GetScrollBarInfo
GetCursorInfo
SetWinEventHook
RegisterClassExA
TranslateMDISysAccel
ReleaseDC
GetClipboardFormatNameW
EnumPropsExW
ToUnicode
IsDialogMessage
DdeNameService
CreateWindowStationA
ToAsciiEx
BroadcastSystemMessageA
CreateWindowExA
ScrollWindowEx
AppendMenuW
OpenDesktopW
BringWindowToTop
DdeSetUserHandle
RegisterClassExW
UnhookWindowsHookEx
ChangeClipboardChain
GetMessagePos
InternalGetWindowText
GetMessageExtraInfo
SetClassLongA
PostThreadMessageW
DdeReconnect
SetClipboardData
DrawTextExW
SetMenuContextHelpId
DefWindowProcA
EnumWindows
ShowWindow
CharLowerBuffW
MapVirtualKeyW
IsWindowUnicode
CloseClipboard
EmptyClipboard
GetUserObjectInformationA
GetClassInfoExW
FrameRect
EnumPropsExA
GetKeyboardLayoutNameW
UnregisterClassW
GetClipboardOwner
ModifyMenuA
GetTabbedTextExtentW
Sections
.text Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 296KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ