Static task
static1
Behavioral task
behavioral1
Sample
4f4debbe2a68618172ced51a2ed2d8d9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f4debbe2a68618172ced51a2ed2d8d9.exe
Resource
win10v2004-20231215-en
General
-
Target
4f4debbe2a68618172ced51a2ed2d8d9
-
Size
364KB
-
MD5
4f4debbe2a68618172ced51a2ed2d8d9
-
SHA1
7c8b14f2a1f2437c88e3113588418f6283f05716
-
SHA256
610d2e45412108e3d3354089027e10a852367f8ff6949dc24c6f3aefd1658ee3
-
SHA512
0929ad2719fa4a0a97d1d50172b873bf19294481f400c434db466846c4d4ecd170bd9a4d17443c52d0024a0af90d61e69b8e2e18d93839a09f88ea4e7a2f09be
-
SSDEEP
6144:GW0uwiw6ea8yXWsnbIwrxQOABfXImAA4HmAYFpf5GWAwK2We18kgX:GW7wiwWvBQRBfXjnGI9GNoRa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f4debbe2a68618172ced51a2ed2d8d9
Files
-
4f4debbe2a68618172ced51a2ed2d8d9.exe windows:4 windows x86 arch:x86
622222eeb2aa5ca4baa2fa765fb47530
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
kernel32
ReadFile
GetCurrentProcessId
GetDateFormatA
GetTimeZoneInformation
InterlockedDecrement
TlsGetValue
GetConsoleOutputCP
GetModuleFileNameA
SetLastError
GetEnvironmentStringsW
EnumSystemLocalesA
GetStringTypeA
SetFileAttributesA
HeapCreate
GetOEMCP
GetLastError
GetProcAddress
SetStdHandle
SetFilePointer
VirtualQuery
TlsAlloc
SetConsoleCtrlHandler
LoadLibraryA
GetModuleHandleW
FreeResource
ExitProcess
GetUserDefaultLCID
HeapFree
GetTimeFormatA
GetConsoleCP
OpenMutexA
GetEnvironmentStrings
TerminateProcess
TlsFree
LCMapStringW
InterlockedIncrement
GetCommandLineA
GlobalFindAtomW
SetConsoleScreenBufferSize
FreeLibrary
LockFile
GetCurrentThread
SetHandleCount
RtlUnwind
FlushFileBuffers
CloseHandle
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
SetEvent
SetUnhandledExceptionFilter
OutputDebugStringW
HeapSize
GetStdHandle
TlsSetValue
WriteFile
FreeEnvironmentStringsW
MultiByteToWideChar
SetEnvironmentVariableA
GetLocaleInfoW
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCPInfo
Sleep
GetStartupInfoA
GetCurrentProcess
SetEndOfFile
LeaveCriticalSection
CreateFileA
InterlockedExchange
VirtualFree
GetConsoleMode
CreateEventA
LCMapStringA
GetFileType
WriteConsoleA
UnhandledExceptionFilter
HeapAlloc
CompareStringW
IsDebuggerPresent
CompareStringA
ConvertDefaultLocale
QueryPerformanceCounter
IsValidCodePage
CommConfigDialogW
GlobalHandle
GetModuleHandleA
CreateMutexA
ReadConsoleOutputCharacterW
EnterCriticalSection
VirtualAlloc
GetACP
DeleteCriticalSection
WriteConsoleW
FreeEnvironmentStringsA
WriteProfileSectionA
IsValidLocale
HeapDestroy
GetTickCount
GetStringTypeW
HeapReAlloc
gdi32
StretchBlt
user32
RegisterClassExA
ChangeClipboardChain
DdeFreeStringHandle
RegisterClassA
SwapMouseButton
IsWindow
LoadKeyboardLayoutW
GetFocus
SwitchToThisWindow
Sections
.text Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ