Static task
static1
Behavioral task
behavioral1
Sample
4b8ec8952cfeacabdc7dd13fa695321d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b8ec8952cfeacabdc7dd13fa695321d.exe
Resource
win10v2004-20231215-en
General
-
Target
4b8ec8952cfeacabdc7dd13fa695321d
-
Size
580KB
-
MD5
4b8ec8952cfeacabdc7dd13fa695321d
-
SHA1
f8b7c1254ed5fddb1a300edc30af8f024e3811e9
-
SHA256
078673f8bafe56f9ebc1d8ba59c98390e043619396da2a38d024ed1b558940d3
-
SHA512
a37053a21da915e07ea5e458dc1e3bea80770df3dbd650c5f96a8ce1e3d6f401860c297beba841ed9993cfe8e7043e59d3e7afd7a371021223f882bd60703c4c
-
SSDEEP
12288:0tUPdUbtKkcM2R9gL3wMXEpjKWuhjqyUYbrcjfaXIwF:0tUPdUQkcM2rg7wM4jfcpUYbomXI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b8ec8952cfeacabdc7dd13fa695321d
Files
-
4b8ec8952cfeacabdc7dd13fa695321d.exe windows:4 windows x86 arch:x86
0a0fe26b3de425090ff9e146b03156fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Duplicate
CreateToolbar
ImageList_EndDrag
ImageList_DragLeave
CreateUpDownControl
CreatePropertySheetPageW
InitCommonControlsEx
DestroyPropertySheetPage
ImageList_LoadImageW
GetEffectiveClientRect
ImageList_Write
CreateStatusWindow
ImageList_Create
ImageList_GetImageCount
DrawStatusText
CreateMappedBitmap
ImageList_LoadImage
ImageList_LoadImageA
ImageList_GetImageRect
ImageList_Copy
ImageList_SetOverlayImage
DrawStatusTextA
user32
ReplyMessage
DispatchMessageW
CreateDialogParamW
ChangeDisplaySettingsW
GetSystemMenu
InvalidateRgn
PeekMessageA
GetCursorInfo
RegisterClassW
DdeKeepStringHandle
GetWindowRgn
GetShellWindow
LoadStringW
LoadMenuA
GetPropA
EnumThreadWindows
ValidateRect
GetMenu
ModifyMenuA
wsprintfA
SetTimer
UnionRect
SetMenuItemBitmaps
DrawStateA
wvsprintfA
GetDialogBaseUnits
EnumDisplaySettingsExA
GetSystemMetrics
GetMessagePos
IsChild
GetWindowTextW
AttachThreadInput
GetSysColorBrush
GetComboBoxInfo
GetMenuContextHelpId
SetKeyboardState
EnumChildWindows
DrawStateW
GetTabbedTextExtentW
ChangeMenuW
SetParent
LoadBitmapW
SetLastErrorEx
RegisterClassA
GetInputState
DdeCreateStringHandleW
IsCharUpperA
OffsetRect
CharLowerBuffW
SwapMouseButton
DefDlgProcW
RegisterClassExA
CopyAcceleratorTableA
SetCapture
CreateAcceleratorTableW
wininet
InternetSetFilePointer
FindNextUrlCacheGroup
FtpCreateDirectoryA
InternetGoOnline
InternetAutodial
InternetShowSecurityInfoByURLA
GopherGetLocatorTypeW
gdi32
GetObjectA
GetDeviceCaps
GetObjectType
GetRandomRgn
SetArcDirection
DeleteDC
CreateDCA
kernel32
HeapCreate
GetCPInfo
HeapDestroy
TlsFree
IsValidCodePage
VirtualQuery
GetCurrentThreadId
IsValidLocale
TlsSetValue
WriteFile
GetStringTypeA
GetFileType
InterlockedExchange
GetLastError
OpenMutexA
GetEnvironmentStrings
GetStringTypeW
CloseHandle
FlushConsoleInputBuffer
IsBadWritePtr
GetTimeFormatA
GetSystemTimeAsFileTime
GetTickCount
TerminateProcess
GetSystemInfo
GetStartupInfoA
GetStdHandle
SetLastError
SetHandleCount
GetUserDefaultLCID
GetCurrentProcess
HeapFree
InitializeCriticalSection
GetEnvironmentStringsW
RtlUnwind
GetCommandLineA
UnhandledExceptionFilter
GetVersionExA
MultiByteToWideChar
WritePrivateProfileStructA
GetCurrentProcessId
WideCharToMultiByte
TlsGetValue
ExitProcess
VirtualAlloc
OutputDebugStringW
GetLongPathNameW
VirtualFree
GetModuleHandleA
SetStdHandle
GetModuleFileNameA
CompareStringA
GetOEMCP
EnterCriticalSection
SetEnvironmentVariableA
QueryPerformanceCounter
HeapAlloc
FindNextChangeNotification
GetTimeZoneInformation
LoadLibraryA
GetACP
EnumSystemLocalesA
LCMapStringW
GetDateFormatA
VirtualProtect
LeaveCriticalSection
ReadFile
CreateMutexA
IsBadReadPtr
SetFilePointer
GlobalGetAtomNameW
HeapReAlloc
FreeEnvironmentStringsA
FlushFileBuffers
TlsAlloc
GetLocaleInfoW
EnumResourceLanguagesA
DeleteCriticalSection
GetLocaleInfoA
LoadModule
CompareStringW
FreeEnvironmentStringsW
GetProcAddress
GetCurrentThread
LCMapStringA
HeapSize
GetEnvironmentVariableA
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ