Static task
static1
Behavioral task
behavioral1
Sample
4f5c28ea87f3342c9b725ec0d1f59631.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f5c28ea87f3342c9b725ec0d1f59631.exe
Resource
win10v2004-20231215-en
General
-
Target
4f5c28ea87f3342c9b725ec0d1f59631
-
Size
245KB
-
MD5
4f5c28ea87f3342c9b725ec0d1f59631
-
SHA1
d2eff957426a24f26e4e8eb217ad48cd2dea6d78
-
SHA256
cb0dcadcfb5f28a20a5afde95614bfb15c77032b0d6427f6f73c86f8b386eb28
-
SHA512
7641fee41823dbd99248369687e3010c68a439909be78b8bb5a2d59f44161868a3cbf84e6cb2354fd610d6a6c8e630a4d41eb64b7e89a5562cae57666f8f21c8
-
SSDEEP
6144:zC3d5y/NTY7HsdnNnN43SoyH+oUarJqJz5VZ2+9knLs9sGUXDFV:DN6M7NGZg+hHJt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f5c28ea87f3342c9b725ec0d1f59631
Files
-
4f5c28ea87f3342c9b725ec0d1f59631.exe windows:4 windows x86 arch:x86
e69509c0acd02d95e8b259e7e489703d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CallNamedPipeW
ClearCommBreak
CopyFileExA
DeleteFileA
DeleteFileW
ExitProcess
GetConsoleTitleW
GetLargestConsoleWindowSize
GetProcessShutdownParameters
GetProfileStringA
GlobalLock
HeapFree
InterlockedDecrement
MoveFileExW
OpenFile
QueryDosDeviceA
ReadFileScatter
SetCalendarInfoA
SetEnvironmentVariableA
SetFileAttributesA
SetHandleCount
SetLocaleInfoW
SetSystemPowerState
SetThreadIdealProcessor
UnlockFileEx
WritePrivateProfileStructA
lstrcpynW
user32
BeginDeferWindowPos
BeginPaint
BroadcastSystemMessageA
ClientToScreen
CreateDesktopW
DdeAbandonTransaction
DdeDisconnectList
DefMDIChildProcA
DialogBoxParamW
DrawAnimatedRects
EnumChildWindows
EnumWindowStationsA
GetDC
GetDlgCtrlID
GetMenuStringA
GetWindowContextHelpId
GetWindowWord
IsDialogMessageA
LookupIconIdFromDirectoryEx
SetDebugErrorLevel
SetKeyboardState
SetMenuItemBitmaps
TrackPopupMenuEx
UnionRect
gdi32
AddFontResourceA
CancelDC
ChoosePixelFormat
CreateColorSpaceA
CreatePolyPolygonRgn
EnumFontFamiliesExW
EnumObjects
FillPath
GetCharABCWidthsFloatA
GetCharABCWidthsFloatW
GetCharWidth32A
GetCharWidth32W
GetEnhMetaFileBits
GetKerningPairsW
GetPixelFormat
GetStretchBltMode
GetViewportOrgEx
GetWindowExtEx
ModifyWorldTransform
RealizePalette
SelectPalette
SetPaletteEntries
SetPixelV
TextOutW
Sections
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 223KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ