Static task
static1
Behavioral task
behavioral1
Sample
4bed48256a4f292d2020df4225dfc296.exe
Resource
win7-20231215-en
General
-
Target
4bed48256a4f292d2020df4225dfc296
-
Size
10KB
-
MD5
4bed48256a4f292d2020df4225dfc296
-
SHA1
4a7333fdfbb0497bd996ed6ab482a8737d40a407
-
SHA256
661059c021614cbb918fbcba986dc75e0902992ea157848a710d3ab0003b5132
-
SHA512
76064553eb2d53084d70ad377055e4a8a72e1dd4fc0ac92fba441cb039fb79958c9c5b050bc607542c82dd82b5f6c9d5a4c5ddeb913c13da2605b040f94de181
-
SSDEEP
192:SyB1x1/eI/pD7U2P0WNYHuIvmRx1nzHrGk7m6Z6N+H+hP9/v+:luI/e5vS1nLVgNeyn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bed48256a4f292d2020df4225dfc296
Files
-
4bed48256a4f292d2020df4225dfc296.exe windows:4 windows x86 arch:x86
8b1f2a53bc5c6ec7b4a0e3ab6339569a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CallNamedPipeW
CancelIo
CreateRemoteThread
EnumResourceLanguagesA
ExitProcess
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FindResourceW
GetACP
GetCommState
GetLongPathNameW
GetModuleFileNameW
GetNamedPipeHandleStateA
GetStringTypeW
GetTapePosition
IsValidLocale
OpenFileMappingA
ReadConsoleOutputA
ReadConsoleOutputAttribute
ReadConsoleOutputCharacterA
ReadConsoleOutputW
ResetEvent
SetConsoleCP
SetConsoleTitleW
SetFileApisToOEM
SetProcessPriorityBoost
WaitForDebugEvent
WriteConsoleOutputW
lstrcpy
user32
AdjustWindowRect
BroadcastSystemMessageW
ChangeDisplaySettingsExW
CopyRect
CreateDesktopA
DdeDisconnectList
DialogBoxParamA
DragObject
DrawStateW
EndTask
EnumDisplaySettingsW
GetCaretBlinkTime
GetClipboardData
GetMonitorInfoA
IsZoomed
KillTimer
LoadKeyboardLayoutW
MessageBoxIndirectA
NotifyWinEvent
OemToCharW
OpenDesktopA
SendMessageW
SetClassLongW
SetCursorPos
SetDebugErrorLevel
SetMenuInfo
SetMenuItemInfoW
SetWindowLongW
gdi32
AngleArc
Chord
CloseEnhMetaFile
CloseFigure
CreateDCA
CreatePalette
EnumEnhMetaFile
EnumMetaFile
GdiPlayDCScript
GetCharacterPlacementA
GetCurrentPositionEx
GetICMProfileA
GetMetaRgn
GetStretchBltMode
GetTextCharset
GetTextExtentExPointW
GetTextMetricsA
OffsetRgn
PatBlt
PlayMetaFileRecord
ResetDCW
SaveDC
SetICMProfileW
SetPolyFillMode
SetSystemPaletteUse
StrokeAndFillPath
UpdateICMRegKeyW
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE