Static task
static1
Behavioral task
behavioral1
Sample
4c2834c9e417f106e274d6e42867a83e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c2834c9e417f106e274d6e42867a83e.exe
Resource
win10v2004-20231215-en
General
-
Target
4c2834c9e417f106e274d6e42867a83e
-
Size
403KB
-
MD5
4c2834c9e417f106e274d6e42867a83e
-
SHA1
d9c5c36a76f358ed0ae3e9154f200b26a5a1d348
-
SHA256
d05ea84f70daba4b464642b1a575aa21cd27da981dcb3b94e8e57a54736c5c86
-
SHA512
a1c698ad9f9a93e817f23f183822e4ac5453af0b6f62a6c4beea700680c8dc3753c52d3ff5332fad60727e39ca41cdccff5f3b93320373d18c9b46ec730759c3
-
SSDEEP
6144:e1EhnlwDAyQJYLAOrTS7wbgYfhvwLumRY01EKAOnmnWSocRoRjbD:eyhlwDyJY8OrWOP+ymDlooRjbD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c2834c9e417f106e274d6e42867a83e
Files
-
4c2834c9e417f106e274d6e42867a83e.exe windows:5 windows
b610ed98d63f5a7f5678df2a29ae8aa7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
GetCurrentProcess
lstrlenW
InterlockedDecrement
TerminateProcess
GetModuleFileNameW
CreateFileW
GetVersionExW
OpenProcess
GetVersion
CreateToolhelp32Snapshot
MultiByteToWideChar
Process32NextW
OutputDebugStringW
DeleteFileW
Process32FirstW
GlobalFree
Sleep
WideCharToMultiByte
GetSystemTime
GetFileTime
GetTempPathW
WaitForSingleObject
CreateProcessW
GetTempFileNameW
CreateDirectoryW
FileTimeToSystemTime
GetProcAddress
GetModuleHandleW
SystemTimeToTzSpecificLocalTime
RemoveDirectoryW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
CloseHandle
HeapFree
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
SetEnvironmentVariableW
GetOEMCP
IsValidCodePage
ReadConsoleW
ReadFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
GetACP
WriteFile
GetStdHandle
LoadLibraryExW
GetModuleHandleExW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
FormatMessageW
GetStringTypeW
SetLastError
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
EncodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
LocalFree
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
FreeLibrary
ExitProcess
user32
wvsprintfW
advapi32
RegCreateKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
OpenProcessToken
RegOpenKeyExW
RegDeleteValueW
RegOpenKeyW
RegEnumValueW
RegQueryValueExW
RegSetValueExW
shell32
SHGetFolderPathW
ole32
CoSetProxyBlanket
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
VariantInit
SysFreeString
SysAllocString
SysAllocStringLen
VariantClear
GetErrorInfo
winhttp
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSetOption
WinHttpAddRequestHeaders
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpConnect
WinHttpCrackUrl
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpWriteData
urlmon
URLDownloadToFileW
userenv
GetUserProfileDirectoryW
rpcrt4
UuidToStringW
UuidCreate
Sections
.text Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ