Static task
static1
Behavioral task
behavioral1
Sample
4ecbc18b9f2a3cb92deb939a9fb1e1cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4ecbc18b9f2a3cb92deb939a9fb1e1cf.exe
Resource
win10v2004-20231215-en
General
-
Target
4ecbc18b9f2a3cb92deb939a9fb1e1cf
-
Size
58KB
-
MD5
4ecbc18b9f2a3cb92deb939a9fb1e1cf
-
SHA1
43ac4a2ff1e1e34cb2eba087d4b4548ad521fbe5
-
SHA256
45a90ca90ae00a8a35c9b671b1cd767a10a2989875c10bd7178ad63d9c304aca
-
SHA512
ca19e2142c63b28f115b2890ff6b334b75da8ce3269b366825ba1d18b5a18239f18b68e029c7856f40e55ddc837032bcde040f12d108a6589a324dc81870a06b
-
SSDEEP
1536:ClLyZsQnBYrpXQZdBXbIsw71x9FATI3JSxicy:ClLyZrBUpXQzBXgRhF3JSs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ecbc18b9f2a3cb92deb939a9fb1e1cf
Files
-
4ecbc18b9f2a3cb92deb939a9fb1e1cf.exe windows:4 windows x86 arch:x86
c084240519b7decdb876365d4eae708c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextLengthA
InsertMenuA
CreateIcon
GetDC
DrawTextW
DrawTextA
GetFocus
EndDialog
CloseWindow
IsMenu
DialogBoxParamA
IsWindow
LoadMenuA
DrawIcon
CopyIcon
CopyRect
CopyImage
GetDlgItem
DialogBoxParamW
LoadCursorA
DrawIconEx
GetWindowTextA
kernel32
GetStdHandle
MultiByteToWideChar
GetFileType
GetVersion
lstrcpynA
CreateFileA
lstrcpyA
LCMapStringA
LCMapStringW
GetCommandLineA
WriteFile
GetCPInfo
GetCurrentProcess
GetStringTypeW
SetFilePointer
lstrcpynW
GetOEMCP
lstrcatA
GetACP
TerminateProcess
GetStringTypeA
GetModuleFileNameA
GetStartupInfoA
SetHandleCount
comctl32
DrawStatusText
InitCommonControls
ImageList_Destroy
ImageList_GetIconSize
CreateStatusWindowW
ImageList_Draw
DllGetVersion
ImageList_GetIcon
ImageList_DragEnter
CreateToolbar
CreateToolbarEx
ImageList_LoadImageA
advapi32
RegDeleteKeyW
RegEnumValueA
RegDeleteValueA
RegEnumKeyExW
RegSetValueW
RegEnumKeyA
RegCreateKeyExW
RegEnumKeyExA
RegQueryValueA
RegDeleteKeyA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 17.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ