Static task
static1
Behavioral task
behavioral1
Sample
4c1ac2b729961969239739c11ca4c543.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c1ac2b729961969239739c11ca4c543.exe
Resource
win10v2004-20231215-en
General
-
Target
4c1ac2b729961969239739c11ca4c543
-
Size
576KB
-
MD5
4c1ac2b729961969239739c11ca4c543
-
SHA1
d7b776a19ee50df945892402cefcaf1b02013a1d
-
SHA256
61d36f66b70823a3a876d6ee764cbe5f9cd29e393f4011e6a2caa0e7983f3f0f
-
SHA512
04dd8ca8b60d1a49f50cea4b48fe473fbc0600bbd9f2e912f84b495a5ddfb2339189b484929cb25e27e4b26c7a67543abfc17c884d4b203fee34f378057a0e9c
-
SSDEEP
12288:3etMr2evSiLZr8mNhVvp7l63/wO4NEFLw8dXCXP/ZE/wLWgBYy:3ets2eaiLZ4unhIh4NEFLw8E3Z4yB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c1ac2b729961969239739c11ca4c543
Files
-
4c1ac2b729961969239739c11ca4c543.exe windows:4 windows x86 arch:x86
6b6263079fdb8b9e51c97cfc1f3a2247
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
ImageList_GetImageRect
ImageList_Copy
user32
GetWindowTextLengthW
SubtractRect
RegisterClassExA
EqualRect
WinHelpW
CreateWindowExA
RegisterClassA
ShowCursor
GetClipboardOwner
RegisterClipboardFormatA
wsprintfA
UnpackDDElParam
LoadAcceleratorsW
SetWindowLongA
CreateCaret
WinHelpA
RegisterClassExW
CharLowerW
SetMenu
ScreenToClient
DefDlgProcW
MessageBoxA
DefFrameProcA
DestroyWindow
AnyPopup
SendNotifyMessageA
IsMenu
DefWindowProcA
CallWindowProcA
ShowWindow
SetDlgItemInt
kernel32
GlobalSize
RemoveDirectoryA
OpenProcess
GetEnvironmentStringsW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
VirtualAlloc
GetCPInfo
InitializeCriticalSection
CompareStringW
SetHandleCount
GetModuleFileNameA
HeapAlloc
TransmitCommChar
GetLastError
ConvertDefaultLocale
TlsAlloc
GetConsoleOutputCP
TlsSetValue
InterlockedCompareExchange
GlobalDeleteAtom
SetEnvironmentVariableA
DeleteCriticalSection
LocalFileTimeToFileTime
FreeLibrary
GetOEMCP
HeapDestroy
GetProcessHeap
DeleteFiber
FreeEnvironmentStringsW
DebugBreak
GetPrivateProfileIntW
InterlockedExchange
FindNextFileW
GetThreadPriorityBoost
GetPrivateProfileStructA
GetVolumeInformationW
IsValidLocale
EnterCriticalSection
HeapCreate
GetCurrentThread
LCMapStringA
GetStdHandle
OpenMutexA
GetModuleHandleA
GetLocaleInfoA
QueryPerformanceCounter
GetComputerNameA
Sleep
CompareStringA
SetConsoleCtrlHandler
GetCalendarInfoA
CreateSemaphoreA
GetProcAddress
WriteConsoleA
GetCommandLineA
GetDiskFreeSpaceExW
GetLocaleInfoW
GetTimeZoneInformation
EnumResourceLanguagesA
GetTickCount
ReadFile
GetDriveTypeW
CreateFileA
FillConsoleOutputCharacterW
HeapFree
ExitProcess
GlobalUnfix
GetStringTypeW
WriteFile
WriteConsoleW
InterlockedDecrement
HeapSize
GetThreadSelectorEntry
MultiByteToWideChar
SetPriorityClass
CreateMutexA
GetACP
WriteFileEx
SetConsoleCursorInfo
VirtualQuery
IsValidCodePage
InterlockedIncrement
MoveFileW
GetConsoleCP
LoadLibraryA
SetLocaleInfoW
TlsGetValue
LocalFlags
GetTimeFormatA
WritePrivateProfileStringA
GetCurrentThreadId
EnumSystemLocalesA
GetEnvironmentStrings
GetSystemDirectoryA
GetCurrencyFormatW
TlsFree
GetStartupInfoW
GetPrivateProfileStringA
GetConsoleMode
GetStringTypeExW
GetCurrentProcessId
SetStdHandle
ExpandEnvironmentStringsW
EnumCalendarInfoW
TerminateProcess
InterlockedExchangeAdd
GetDateFormatA
GlobalGetAtomNameA
CloseHandle
IsDebuggerPresent
VirtualFree
SetConsoleActiveScreenBuffer
WideCharToMultiByte
GetCurrentDirectoryA
MoveFileExA
GetCompressedFileSizeA
GetStringTypeA
RtlUnwind
FlushFileBuffers
FreeEnvironmentStringsA
SetFilePointer
HeapReAlloc
GetUserDefaultLCID
SetLastError
LCMapStringW
GetVersionExA
GetStartupInfoA
GetCurrentProcess
VirtualUnlock
GetFileType
SetUnhandledExceptionFilter
LeaveCriticalSection
SetThreadAffinityMask
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ