Static task
static1
Behavioral task
behavioral1
Sample
4c4081405e658c0c99c105df21a8da02.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c4081405e658c0c99c105df21a8da02.exe
Resource
win10v2004-20231222-en
General
-
Target
4c4081405e658c0c99c105df21a8da02
-
Size
178KB
-
MD5
4c4081405e658c0c99c105df21a8da02
-
SHA1
c7e403362f40f5cdfcf62ca0b4556eeff47a802a
-
SHA256
958ddc682e79c19140420223042f684c0c112dab10cdc64473d2691a213aec55
-
SHA512
c74922f18274351ecc9bac6c99becfaeae7fa302fb546d0cefa9c205d4382fd2f4c33e821b39641ca30429dd881bbad23d9840b907674cc4607f0a9cfd61add5
-
SSDEEP
3072:HAJDkXtuP6L6q7EV1k2TqvuqLv7W601jjRVwCzrk1uP3bUG0kuD4vN4rFuFb:ghxP+a5IzfkZ3bCb4vE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c4081405e658c0c99c105df21a8da02
Files
-
4c4081405e658c0c99c105df21a8da02.exe windows:4 windows x86 arch:x86
fe7aeda329a9116dc44cf18e619b55da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddLocalAlternateComputerNameA
WideCharToMultiByte
FindNextFileA
GetCurrentProcessId
GetModuleHandleA
EnumResourceLanguagesW
lstrlenA
GetCurrentThreadId
QueryPerformanceCounter
WriteFile
EnumResourceTypesW
SetFilePointer
CreateMailslotA
ReadFile
FindFirstFileA
GlobalHandle
IsDBCSLeadByte
FindClose
newdev
UpdateDriverForPlugAndPlayDevicesA
oleacc
AccessibleChildren
CreateStdAccessibleProxyW
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ