Static task
static1
Behavioral task
behavioral1
Sample
4df782530eb9b38ece29a706c75bdb5d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4df782530eb9b38ece29a706c75bdb5d.exe
Resource
win10v2004-20231215-en
General
-
Target
4df782530eb9b38ece29a706c75bdb5d
-
Size
26KB
-
MD5
4df782530eb9b38ece29a706c75bdb5d
-
SHA1
f6db70f1c5815769e2ca5dd3ea502cbf030d3bc9
-
SHA256
7c0291642163c2f6c1eeab21fe4a2acdf97caa57fdacac6c875ca0b375dfdb64
-
SHA512
0289568fe0806ded2fabc5cba4cf84323c13753577d50a4a293be05604897a2151c34e7e1aca3cdf5886d92bb846c80c93464f083beab3ec5f39ac08b5f7fb3f
-
SSDEEP
768:NUnA8ZwKFrYRvwwxilbcp6ORXKymB6RoZ4A7:NUA8yK1yknORXKym8o+A7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4df782530eb9b38ece29a706c75bdb5d
Files
-
4df782530eb9b38ece29a706c75bdb5d.exe windows:4 windows x86 arch:x86
f57523bed0458317aacd9b2c1be4f074
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CreateEventA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
WaitForSingleObject
Sleep
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
DeleteFileA
ExitProcess
GetModuleHandleA
GetCommandLineA
lstrlenA
SetEvent
CreateProcessA
FindClose
ResetEvent
CreateThread
lstrcmpA
WaitForMultipleObjects
FindResourceA
LoadResource
WaitForSingleObjectEx
WriteFileEx
Process32First
CompareStringA
ExitThread
GetModuleFileNameA
lstrcpyA
lstrcatA
user32
TranslateMessage
DestroyWindow
PeekMessageA
DispatchMessageA
MsgWaitForMultipleObjects
CreateWindowExA
AnyPopup
wsprintfA
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegNotifyChangeKeyValue
ole32
CoInitialize
CoUninitialize
shell32
SHGetFolderPathA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ