Static task
static1
Behavioral task
behavioral1
Sample
4e9ac08196221ca7cf4edb9c1b5b5202.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4e9ac08196221ca7cf4edb9c1b5b5202.exe
Resource
win10v2004-20231222-en
General
-
Target
4e9ac08196221ca7cf4edb9c1b5b5202.exe
-
Size
392KB
-
MD5
4e9ac08196221ca7cf4edb9c1b5b5202
-
SHA1
48c719e304ac4d289552e68b3a52d67f71ed1c17
-
SHA256
a8df22911b840dc4496be3ce675422d090d112f143d63227938f37f115e71a4d
-
SHA512
9b0b5e787307dbab902a1ac50b5de4c542a1d494ebce0d0c62c5313b572c02749db67718c1db25cbc38ac0a8b005b205d5fa920f1d1b62d58172562b70542088
-
SSDEEP
12288:0gLUyau9eyDi8Zwb2FJxjTwQN5fg1EtmaPZ:R99eyWKwkJxrug
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e9ac08196221ca7cf4edb9c1b5b5202.exe
Files
-
4e9ac08196221ca7cf4edb9c1b5b5202.exe.exe windows:4 windows x86 arch:x86
af0f32cc30b6deb05c453e7888bf1de0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
CreateFileA
LoadLibraryExA
HeapCreate
ExitProcess
GetLastError
CreateMutexA
SetLastError
FreeEnvironmentStringsA
TlsGetValue
FindClose
HeapDestroy
LocalUnlock
GlobalFree
FreeConsole
UnmapViewOfFile
FindResourceA
IsBadCodePtr
SetVolumeMountPointA
GetModuleHandleA
user32
DispatchMessageA
GetIconInfo
IsWindow
DefWindowProcW
GetDlgItem
CallWindowProcA
GetFocus
FillRect
CopyRect
DrawMenuBar
GetDC
DrawEdge
CheckRadioButton
uxtheme
GetThemeSysInt
GetThemeRect
DrawThemeEdge
DrawThemeText
DrawThemeIcon
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ