Static task
static1
Behavioral task
behavioral1
Sample
4e831d27490ba16834def31cd6456156.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e831d27490ba16834def31cd6456156.exe
Resource
win10v2004-20231215-en
General
-
Target
4e831d27490ba16834def31cd6456156.exe
-
Size
28KB
-
MD5
4e831d27490ba16834def31cd6456156
-
SHA1
9337c320becb5417eba4140f92be5c411d867bd3
-
SHA256
cf2c7236d49d90e0e2070812497fc89e668691a32fd570db738b4a079384233c
-
SHA512
25eab15351f32db762c6e6b8db43406c3912445a3f3918b6d1b58c63878224849d12b4d3d161d627342bd35919b5ef3e35d4fa24fc8b197e698fe6d03f179a58
-
SSDEEP
768:cLULRI49FSClUZHXVMqSHJcZMQSEQ1QZe2nKLGU7F:cL4ZUxXqqnMb1QILZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e831d27490ba16834def31cd6456156.exe
Files
-
4e831d27490ba16834def31cd6456156.exe.exe windows:4 windows x86 arch:x86
d0df27fed029b2967fe8d5ae51089708
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
lstrcatA
lstrcpyA
SetThreadPriority
GetCurrentThread
GetCurrentProcess
Sleep
FindFirstFileA
GetModuleFileNameA
InterlockedDecrement
WideCharToMultiByte
lstrlenW
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
OpenMutexA
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
CopyFileA
DeleteFileA
CreateMutexW
GetLocalTime
ReadFile
SetFilePointer
SetFileAttributesA
WriteFile
GetCurrentDirectoryA
CreateThread
LoadLibraryA
CreateMutexA
MultiByteToWideChar
CreateToolhelp32Snapshot
LocalFree
GetLastError
Process32First
Process32Next
OpenProcess
CreateProcessW
CloseHandle
user32
FindWindowExA
SendMessageA
GetWindowThreadProcessId
wsprintfA
IsWindow
wsprintfW
CharUpperA
FindWindowA
advapi32
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetNamedSecurityInfoA
shell32
SHChangeNotify
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ole32
OleRun
CoCreateInstance
CoInitialize
oleaut32
SysAllocString
SysAllocStringLen
SysStringByteLen
VariantInit
VariantClear
SysFreeString
VariantCopy
SysStringLen
GetErrorInfo
shlwapi
SHSetValueA
SHDeleteKeyA
SHDeleteValueA
msvcrt
_controlfp
rename
_CxxThrowException
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
memcpy
memcmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_EH_prolog
__CxxFrameHandler
memset
strchr
__getmainargs
__p___initenv
exit
_XcptFilter
strlen
_strupr
_wcsupr
wcsstr
_exit
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ