Static task
static1
Behavioral task
behavioral1
Sample
4fabb9c27e6db6209f414bcad7e07de5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4fabb9c27e6db6209f414bcad7e07de5.exe
Resource
win10v2004-20231222-en
General
-
Target
4fabb9c27e6db6209f414bcad7e07de5
-
Size
340KB
-
MD5
4fabb9c27e6db6209f414bcad7e07de5
-
SHA1
c5748a4d74830663d4d874ddc9fdbddf39172098
-
SHA256
9790951a694365c06452db2886837da01d5774b7049c42e6eeeb6e1409f1948e
-
SHA512
fafed4235d1f9168e29ecfe256819a4b988682687d0cb2dc6d7f22ee2d3316cec2cb39b9765b1a68949451d8cc9f99da27db9811840eff285cdc92f594e325f2
-
SSDEEP
6144:2N+o8LnFjrWYzUY8KT5eAN9zjBZN+uo1zSQ2Qy5R1ifSDd3e:2NEFja7IeAN9/Bju1zSQX2jGSDd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fabb9c27e6db6209f414bcad7e07de5
Files
-
4fabb9c27e6db6209f414bcad7e07de5.exe windows:4 windows x86 arch:x86
bb593eca60d97ccaf320661d2055681d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
FillRgn
SetWinMetaFileBits
LineDDA
ColorMatchToTarget
SetBkColor
AddFontResourceW
StartDocA
GetDIBits
GetClipBox
Arc
GetMetaFileA
GetLayout
GdiPlayDCScript
EndPage
OffsetViewportOrgEx
RealizePalette
TranslateCharsetInfo
CopyEnhMetaFileA
comctl32
ImageList_DragShowNolock
DrawInsert
DrawStatusText
DrawStatusTextA
InitCommonControlsEx
ImageList_DragMove
ImageList_SetFilter
DrawStatusTextW
CreateToolbarEx
ImageList_SetImageCount
CreatePropertySheetPage
CreateToolbar
ImageList_GetDragImage
_TrackMouseEvent
ImageList_GetImageRect
ImageList_Remove
ImageList_GetFlags
ImageList_GetBkColor
CreateStatusWindowA
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Replace
CreateStatusWindowW
ImageList_Create
ImageList_EndDrag
advapi32
RegDeleteKeyA
RegOpenKeyExA
RegNotifyChangeKeyValue
RegFlushKey
LookupPrivilegeValueA
CryptSignHashA
RegReplaceKeyW
CryptEncrypt
RegQueryValueExW
LookupSecurityDescriptorPartsW
LookupPrivilegeDisplayNameW
CryptImportKey
CryptHashSessionKey
RegCreateKeyA
LookupPrivilegeValueW
RegCloseKey
RegSetValueExA
CryptHashData
RegCreateKeyW
CryptContextAddRef
comdlg32
PageSetupDlgW
ChooseColorW
kernel32
DeleteAtom
GetEnvironmentStringsW
VirtualQuery
GetStartupInfoW
GetLongPathNameA
LockFile
FillConsoleOutputCharacterA
IsValidCodePage
GetLastError
CompareStringW
TlsSetValue
InitializeCriticalSection
HeapSize
GetFileType
TlsGetValue
GetCurrentProcessId
InterlockedExchange
GetSystemDirectoryW
SetPriorityClass
GetModuleFileNameA
GetTickCount
ReadConsoleInputA
FreeEnvironmentStringsA
GetStringTypeA
lstrcatA
FillConsoleOutputAttribute
EnumSystemLocalesA
GetOEMCP
CompareStringA
HeapFree
CloseHandle
TlsAlloc
EnumResourceTypesW
SetConsoleCP
IsBadWritePtr
WaitForSingleObjectEx
LCMapStringW
GetCommandLineA
CopyFileExA
WriteConsoleInputA
GetDateFormatA
FindAtomW
GetThreadLocale
lstrcpynA
LoadLibraryA
SetFilePointer
lstrcmpiW
GetModuleHandleA
GetUserDefaultLCID
EnterCriticalSection
GetPrivateProfileSectionNamesA
LocalAlloc
UnhandledExceptionFilter
EnumDateFormatsExW
GetCurrentThreadId
lstrcpynW
SetWaitableTimer
ReadConsoleInputW
GetEnvironmentStrings
EnumSystemLocalesW
GetLocaleInfoA
HeapDestroy
LCMapStringA
SetHandleCount
SetStdHandle
SetThreadContext
OpenFileMappingA
ReadFile
SetThreadLocale
LocalLock
GetPrivateProfileIntA
IsValidLocale
GetConsoleTitleA
GetStringTypeW
QueryPerformanceCounter
GetNamedPipeHandleStateA
GetTimeFormatA
FileTimeToDosDateTime
GetLocaleInfoW
SetLastError
VirtualProtectEx
WideCharToMultiByte
FreeEnvironmentStringsW
WriteFile
GetWindowsDirectoryA
GetCurrentProcess
GetVersionExA
GetStartupInfoA
LocalCompact
OpenFile
GetDriveTypeA
GetACP
VirtualAlloc
VirtualFreeEx
EnumDateFormatsA
SetConsoleOutputCP
TlsFree
GetSystemInfo
HeapCreate
TerminateProcess
ExitProcess
WriteProfileSectionA
VirtualFree
PulseEvent
InitializeCriticalSectionAndSpinCount
CreateDirectoryA
FlushFileBuffers
OpenMutexA
SetVolumeLabelW
VirtualProtect
HeapReAlloc
FindNextFileA
GetStdHandle
CreateMutexA
HeapAlloc
GetProcAddress
MultiByteToWideChar
RtlUnwind
GetSystemTimeAsFileTime
LeaveCriticalSection
WriteConsoleOutputCharacterA
GetExitCodeThread
GetTimeZoneInformation
GetCurrentThread
SetEnvironmentVariableA
GetProfileSectionA
DeleteCriticalSection
GetCPInfo
wininet
RunOnceUrlCache
HttpSendRequestExW
GetUrlCacheConfigInfoA
FtpCommandA
SetUrlCacheEntryGroup
InternetDialA
FtpPutFileA
ResumeSuspendedDownload
InternetCrackUrlA
user32
EnumWindowStationsA
EnumDesktopsA
LoadCursorFromFileW
EndPaint
GetClassNameW
DestroyWindow
RegisterClassA
LoadBitmapA
SetWindowTextA
CallMsgFilterA
ShowWindow
GetSysColorBrush
SetMenuDefaultItem
GrayStringW
GetClassLongW
InSendMessage
LoadMenuIndirectW
RegisterClassW
MessageBoxW
TileWindows
wvsprintfA
EditWndProc
GetKeyState
ShowScrollBar
ClientToScreen
IsIconic
RegisterClassExA
SwitchToThisWindow
CreateWindowExA
SetDlgItemTextW
WINNLSGetEnableStatus
EnumPropsExW
DefWindowProcW
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ