Static task
static1
Behavioral task
behavioral1
Sample
4dd19230c7758aa2b45298aeae2ecc7c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4dd19230c7758aa2b45298aeae2ecc7c.exe
Resource
win10v2004-20231222-en
General
-
Target
4dd19230c7758aa2b45298aeae2ecc7c
-
Size
348KB
-
MD5
4dd19230c7758aa2b45298aeae2ecc7c
-
SHA1
faa7063c9d27ad2f5ba0c0677981996ff935af86
-
SHA256
819afd477fc40491f9b450123adbf1d40bd65d06e0b6dc520d2285e55a0bc7bb
-
SHA512
d2f47663d54e22408f95a6d119296c22ab6d459b1fcba8330d270613da1670f4816da357e0cc7dc6f9947f2ea13b0d8098cf5b59dbf3b0a1c7f6196edafa702b
-
SSDEEP
6144:UBVb4WosL132Bm8XcqI44WPPODZthSCIafgLHh5TD42jlliG97SXEDnUSU:Unb4WosxGo84hZzSCIafgLHh5TD42jlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dd19230c7758aa2b45298aeae2ecc7c
Files
-
4dd19230c7758aa2b45298aeae2ecc7c.exe windows:4 windows x86 arch:x86
f39aa081bdf8074da24549ebbd7edf13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
CreateIconFromResource
CopyIcon
GetDlgItemInt
CreateDesktopW
GetTabbedTextExtentW
ClipCursor
CreateMDIWindowW
DdeFreeStringHandle
SetThreadDesktop
ToAsciiEx
MessageBoxA
GetGuiResources
RegisterClassA
OpenIcon
CheckRadioButton
DefMDIChildProcA
OemKeyScan
SetWindowRgn
EqualRect
CreateWindowExA
GetDoubleClickTime
EnumWindows
DdeQueryNextServer
ShowWindow
SendMessageA
GetMenuStringA
GetClipCursor
GetMenuItemInfoW
LoadMenuIndirectW
InternalGetWindowText
EnumDisplayMonitors
LoadIconA
RegisterWindowMessageA
RegisterClassExA
GetDlgItemTextA
DefWindowProcA
GetComboBoxInfo
DdeQueryStringW
GetProcessDefaultLayout
EnumDisplaySettingsW
DdeSetQualityOfService
LoadAcceleratorsW
comctl32
CreateStatusWindowA
ImageList_GetFlags
CreateStatusWindowW
ImageList_SetDragCursorImage
DrawStatusTextW
ImageList_BeginDrag
ImageList_GetImageRect
ImageList_DragLeave
ImageList_Duplicate
_TrackMouseEvent
InitMUILanguage
InitCommonControlsEx
gdi32
GetWindowOrgEx
PtVisible
GetPixel
GetTextExtentPointW
SelectClipPath
CreateFontW
CreateICA
ExtCreateRegion
StrokePath
SetBitmapBits
SelectPalette
Rectangle
SetWindowExtEx
PolyDraw
ScaleViewportExtEx
OffsetClipRgn
SetEnhMetaFileBits
GetFontLanguageInfo
GetTextFaceW
EnumFontFamiliesExW
GetViewportExtEx
kernel32
FreeEnvironmentStringsA
GetConsoleTitleA
GetModuleHandleA
RtlUnwind
GetTimeFormatA
VirtualFree
SetHandleCount
ExitProcess
GetProcessHeaps
EnterCriticalSection
GetTimeZoneInformation
EnumDateFormatsExW
lstrcat
WriteProfileSectionW
ConvertDefaultLocale
GetStartupInfoW
GetModuleFileNameA
GetProcAddress
VirtualProtectEx
WriteConsoleOutputA
FileTimeToLocalFileTime
CreateEventW
GetEnvironmentStringsW
TlsAlloc
EnumResourceNamesA
CloseHandle
GetExitCodeProcess
IsValidCodePage
GetStartupInfoA
GetTimeFormatW
TlsSetValue
GetProfileStringA
lstrcmpA
GetCurrentThreadId
RemoveDirectoryW
TlsFree
LoadLibraryExW
SetSystemTime
GetACP
SetConsoleOutputCP
SetConsoleCursorInfo
GetSystemInfo
GetLocaleInfoW
SetFilePointer
GetPrivateProfileSectionNamesA
UnhandledExceptionFilter
GetLocaleInfoA
IsBadWritePtr
LocalUnlock
GetNamedPipeHandleStateA
GetThreadContext
HeapFree
TlsGetValue
CompareStringA
FindClose
HeapReAlloc
GetPrivateProfileStructA
InterlockedExchange
ReleaseSemaphore
GetComputerNameA
HeapDestroy
GetVersionExA
AddAtomA
SetStdHandle
GetCurrentThread
SetLastError
FreeEnvironmentStringsW
GetTickCount
ContinueDebugEvent
ReadFile
ExpandEnvironmentStringsW
FindFirstFileExA
GetModuleFileNameW
LocalReAlloc
GetCurrentProcess
GetLastError
HeapCreate
WriteFile
GetEnvironmentStrings
FlushFileBuffers
WaitForDebugEvent
DeleteCriticalSection
FindResourceW
GetStringTypeW
GetDateFormatA
WideCharToMultiByte
GetDiskFreeSpaceExW
MultiByteToWideChar
GetStringTypeA
CreateMutexA
PulseEvent
SystemTimeToFileTime
GetFileType
GetCPInfo
QueryPerformanceCounter
HeapSize
TerminateProcess
GetSystemDirectoryW
SetComputerNameW
LoadResource
VirtualProtect
GetCommandLineW
ReadConsoleW
LeaveCriticalSection
FindAtomW
VirtualQuery
OpenMutexA
CompareStringW
LCMapStringW
GlobalFree
CreateWaitableTimerW
GetCurrentProcessId
CreateSemaphoreA
GetUserDefaultLCID
CreateDirectoryExA
GetWindowsDirectoryA
GetCurrencyFormatW
ReadConsoleOutputCharacterW
LoadLibraryA
LCMapStringA
SetEnvironmentVariableA
InitializeCriticalSection
GetStdHandle
FillConsoleOutputCharacterA
AllocConsole
GetSystemTimeAsFileTime
EnumSystemLocalesA
GetOEMCP
HeapAlloc
EnumDateFormatsExA
ReadFileEx
GlobalUnfix
VirtualAlloc
GetCommandLineA
OpenMutexW
ReadConsoleOutputW
IsValidLocale
GetLongPathNameW
MapViewOfFile
Sections
.text Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ