Static task
static1
Behavioral task
behavioral1
Sample
4f5da6d28059b19c5278a4b36b9aab66.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f5da6d28059b19c5278a4b36b9aab66.exe
Resource
win10v2004-20231215-en
General
-
Target
4f5da6d28059b19c5278a4b36b9aab66
-
Size
357KB
-
MD5
4f5da6d28059b19c5278a4b36b9aab66
-
SHA1
a4232a02473673eb82922034f5483be8f8162b9f
-
SHA256
5a56372b0f35037d5817994ad785c03192186dd45441cb1ec1f815fa69004d02
-
SHA512
09ce0a6eb45ca49c9de307a0e0646a5c0afc5d60fd906b6625d30a44bd1fc6db60ed559d79fffa15c7cc18b0597c689afb8e76219251713b0c8e7aa4a0eae7d9
-
SSDEEP
6144:73C4X0/J8clHBszu8w+efiXZquDVXozqTtTMah8raWJhFXopnYlex2nb1AeFxtTi:7y4X0BDlhslu1PeBTMaitDGpnYwA1Fxc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f5da6d28059b19c5278a4b36b9aab66
Files
-
4f5da6d28059b19c5278a4b36b9aab66.exe windows:4 windows x86 arch:x86
9915217f093a3d3373214df48dacf0e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
wininet
InternetSetOptionA
urlmon
CoInternetCreateZoneManager
winmm
waveOutSetVolume
Sections
CODE Size: 325KB - Virtual size: 1012KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE