Static task
static1
Behavioral task
behavioral1
Sample
4e97e57c194cd784c684c62498d1c340.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e97e57c194cd784c684c62498d1c340.exe
Resource
win10v2004-20231215-en
General
-
Target
4e97e57c194cd784c684c62498d1c340
-
Size
421KB
-
MD5
4e97e57c194cd784c684c62498d1c340
-
SHA1
3c56a4da66189b98ca03bd464b7aa569156113c3
-
SHA256
200992b7b68f19d4f55f41f8f9421808009ddf6ac50ca5ab2a3fd112c160ae53
-
SHA512
b19497a560e4be52c50556165a204da53796006215cd4aa9a43bbacdcd971572e2722f9a203fabfd5c6714956ff14d77334ef2aeaf53f78b1c34d861cac5c8a6
-
SSDEEP
12288:HXlu5o0gF5Jru/bsHo/kgQIL6ZHplVc7z60lQ+m6i:H1coXLY/bsfq6Dc7qgi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e97e57c194cd784c684c62498d1c340
Files
-
4e97e57c194cd784c684c62498d1c340.exe windows:4 windows x86 arch:x86
b21dd80e19ed6aff4037649c97b3bcb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
LCMapStringA
LeaveCriticalSection
UnhandledExceptionFilter
GetProcAddress
MultiByteToWideChar
HeapReAlloc
WideCharToMultiByte
GetCPInfo
HeapCreate
GetCurrentProcessId
HeapAlloc
EnterCriticalSection
GetOEMCP
TlsAlloc
GetModuleHandleA
SetConsoleCtrlHandler
WriteConsoleOutputW
GetTimeFormatA
Sleep
GetStdHandle
IsDebuggerPresent
GetCurrentThread
InterlockedIncrement
SetHandleCount
DeleteCriticalSection
GetUserDefaultLCID
CompareStringA
CreateToolhelp32Snapshot
ExitProcess
GetTickCount
CreateFileMappingW
WriteFile
HeapFree
GetFileType
GetModuleFileNameA
InitializeCriticalSection
LoadLibraryA
QueryPerformanceCounter
GetEnvironmentStringsW
VirtualAlloc
GlobalUnfix
GetCommandLineA
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetLastError
GetProcessHeap
GetStringTypeW
TlsFree
CreateDirectoryW
LCMapStringW
GetDateFormatA
GetSystemTimeAsFileTime
GetLocaleInfoA
FreeEnvironmentStringsW
GetProcessHeaps
GetLocaleInfoW
GetStartupInfoA
FreeEnvironmentStringsA
TlsSetValue
SetLastError
InterlockedDecrement
EnumSystemLocalesA
GetStringTypeA
TlsGetValue
CompareStringW
IsValidLocale
VirtualFree
GetTimeZoneInformation
GetDiskFreeSpaceW
InterlockedExchange
HeapDestroy
GetVersionExA
GetEnvironmentStrings
SetUnhandledExceptionFilter
GetACP
FreeLibrary
SetEnvironmentVariableA
IsValidCodePage
advapi32
RegLoadKeyA
RegQueryValueW
RegEnumKeyW
CryptDestroyHash
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 280KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ