Static task
static1
Behavioral task
behavioral1
Sample
4d3fc6589fa88378c43829ed7b4267cb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4d3fc6589fa88378c43829ed7b4267cb.exe
Resource
win10v2004-20231215-en
General
-
Target
4d3fc6589fa88378c43829ed7b4267cb
-
Size
568KB
-
MD5
4d3fc6589fa88378c43829ed7b4267cb
-
SHA1
133dc08096dcf30b5c7f35a02d97379c31f9d858
-
SHA256
ff5ec1cd03260bb63660a7411615acb1fea486d4c158c354e03e903d23295bf9
-
SHA512
5c0cba8852cadc5ccf5f8cfc7a6a5df90f41d0760daccb29cb373f5e130bc659efebb947ff5b2069d4ed4dab24a0a9e1136c02a5b6c2776fe926e4df51746d8d
-
SSDEEP
12288:3/MPcUIv8TOFnRi1/7y4UR9h0gJlLM/0NXyYvX:3/MUUvCFnRi1+4UjJJMsNXBf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d3fc6589fa88378c43829ed7b4267cb
Files
-
4d3fc6589fa88378c43829ed7b4267cb.exe windows:4 windows x86 arch:x86
a9f6caeef36c458efef5f45ebf7f7037
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_EndDrag
ImageList_SetDragCursorImage
ImageList_Destroy
CreateToolbarEx
InitCommonControlsEx
DestroyPropertySheetPage
ImageList_LoadImageA
ImageList_GetImageCount
GetEffectiveClientRect
CreatePropertySheetPage
ImageList_Merge
ImageList_Copy
ImageList_GetIconSize
CreateMappedBitmap
ImageList_Remove
CreateUpDownControl
user32
DdeQueryStringW
RegisterClassExA
LookupIconIdFromDirectory
CreateIconFromResource
DlgDirSelectExW
UnhookWindowsHook
OemToCharBuffA
TabbedTextOutA
GetMenuItemInfoW
SetWindowWord
FindWindowA
EnumDisplaySettingsW
MessageBoxW
RegisterClassA
SetPropW
DrawIconEx
LoadCursorW
SetActiveWindow
ShowWindow
IsRectEmpty
DefWindowProcW
DestroyWindow
CreateWindowExW
CharLowerBuffA
GetClassLongW
ScrollWindowEx
LoadStringW
EnumClipboardFormats
gdi32
CreateColorSpaceA
CreateDCW
ExtEscape
TranslateCharsetInfo
GetCharWidthFloatW
Pie
GetCharWidthW
DPtoLP
SetDIBitsToDevice
CreateRoundRectRgn
DeleteDC
GetBoundsRect
GetSystemPaletteUse
PolyTextOutA
GetICMProfileA
EnumFontsW
GetBkColor
GetObjectA
CloseEnhMetaFile
SelectPalette
GetColorSpace
GetLogColorSpaceA
PlayMetaFileRecord
GetDeviceCaps
CancelDC
SelectObject
SetTextJustification
GetOutlineTextMetricsA
CreateBrushIndirect
DeleteObject
CloseMetaFile
kernel32
HeapDestroy
GetProfileIntW
EnumSystemLocalesA
SetConsoleTextAttribute
UnhandledExceptionFilter
CommConfigDialogW
GetUserDefaultLangID
GetPrivateProfileIntA
FreeEnvironmentStringsA
HeapFree
GetStartupInfoA
FindFirstFileW
DeleteCriticalSection
LoadLibraryW
GetLocalTime
GetFileType
LCMapStringA
TlsFree
GetTempPathA
OutputDebugStringW
EnumSystemLocalesW
HeapCreate
GetModuleHandleA
GetModuleFileNameA
ReadConsoleInputA
GetStringTypeW
VirtualAllocEx
lstrcmp
GetACP
TlsSetValue
InterlockedDecrement
WriteFile
GetStringTypeA
CreateMutexA
GetProfileStringA
GetCurrentProcess
OpenMutexA
QueryPerformanceCounter
VirtualQuery
LoadLibraryA
GetCurrentThread
GetLogicalDrives
ReadConsoleOutputA
GetLastError
GetEnvironmentStrings
InterlockedCompareExchange
SetEvent
VirtualFreeEx
CompareStringA
IsValidCodePage
HeapAlloc
UnlockFile
LocalLock
GetAtomNameW
WritePrivateProfileStructA
CreateFileMappingW
CloseHandle
lstrcpyA
GetSystemTime
GetSystemTimeAsFileTime
ReadFile
EnterCriticalSection
GetTickCount
GetTempFileNameA
EnumCalendarInfoExW
RtlUnwind
GetFileSize
GetCurrentProcessId
VirtualAlloc
AddAtomA
InitializeCriticalSection
LocalReAlloc
FindResourceW
HeapReAlloc
WideCharToMultiByte
ReadConsoleA
GetVersion
WritePrivateProfileStringA
GlobalGetAtomNameW
GetTimeZoneInformation
VirtualFree
IsBadWritePtr
SetConsoleCtrlHandler
TerminateProcess
WaitForSingleObjectEx
GetStdHandle
InterlockedExchange
GetOEMCP
SetFilePointer
DosDateTimeToFileTime
SetLastError
InterlockedExchangeAdd
LocalCompact
GetNumberFormatW
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
MultiByteToWideChar
GetCurrencyFormatW
TlsAlloc
TryEnterCriticalSection
SetUnhandledExceptionFilter
GetProcAddress
LCMapStringW
LocalFileTimeToFileTime
GetLocaleInfoW
GetCommandLineA
WriteConsoleA
WritePrivateProfileSectionA
SetStdHandle
ExitProcess
GetCPInfo
TlsGetValue
GlobalAddAtomW
SetHandleCount
LeaveCriticalSection
InterlockedIncrement
SetLocaleInfoW
GetCurrentThreadId
GetEnvironmentStringsW
FreeEnvironmentStringsW
comdlg32
ChooseColorA
Sections
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ