Static task
static1
Behavioral task
behavioral1
Sample
4ffbedbd77061eb7ffdfd27f29f7c48d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4ffbedbd77061eb7ffdfd27f29f7c48d.exe
Resource
win10v2004-20231215-en
General
-
Target
4ffbedbd77061eb7ffdfd27f29f7c48d
-
Size
324KB
-
MD5
4ffbedbd77061eb7ffdfd27f29f7c48d
-
SHA1
56ff009af2768f1cf64bef4533b323c49c09d5fe
-
SHA256
4b48f9137e502e1faf100aecf23a0c1a1a7b81ad9cf411ed439c896a10b5269a
-
SHA512
2aced8c1509c18b98888b74e287789a40d13d9cc908397b841e5459a1a8992986244558292d1f812f7b8f02944a3b73821e775c77d8f494c717c8f1f137565ad
-
SSDEEP
6144:0BLpLVTb3BUqV7gIt9ty73hbsWrbpccagA+n8kx/bxPop:IFL5bxUqZt9k7hbseccORMNP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ffbedbd77061eb7ffdfd27f29f7c48d
Files
-
4ffbedbd77061eb7ffdfd27f29f7c48d.exe windows:4 windows x86 arch:x86
7f99522938dc0ae4418b49bfe696ef4a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
EqualRgn
SetICMMode
GetObjectW
GetCharABCWidthsFloatA
GetDeviceCaps
SetROP2
ExtTextOutA
SelectObject
DeleteObject
CreateDCA
SetDIBits
comdlg32
LoadAlterBitmap
shell32
CommandLineToArgvW
SHBrowseForFolder
comctl32
InitCommonControlsEx
ImageList_GetBkColor
user32
OemToCharW
GetPriorityClipboardFormat
SetWindowContextHelpId
ShowOwnedPopups
GetMenuStringA
DdeUninitialize
IsCharLowerW
EnumDisplayDevicesW
DeleteMenu
CreateWindowExW
RegisterClassExW
RedrawWindow
CheckMenuRadioItem
DdeQueryConvInfo
RegisterWindowMessageW
TabbedTextOutW
PostMessageW
DrawTextExA
InvalidateRgn
CopyIcon
GetTitleBarInfo
DlgDirListComboBoxA
CharLowerW
DdeQueryStringW
DefWindowProcW
ChangeDisplaySettingsExA
AdjustWindowRectEx
FlashWindowEx
GetClassInfoExA
SetLastErrorEx
InSendMessageEx
UnregisterDeviceNotification
FrameRect
RegisterClassA
DragDetect
ToAsciiEx
GetDC
GetMenuContextHelpId
wsprintfA
MessageBoxA
DestroyWindow
ClipCursor
ScrollWindowEx
RegisterClassExA
DdeUnaccessData
ShowWindow
CreateMDIWindowW
BroadcastSystemMessage
GetWindowPlacement
DefDlgProcW
GrayStringW
DefFrameProcW
IsWindowUnicode
PeekMessageA
GetKeyboardLayout
GetWindowThreadProcessId
kernel32
GetFileType
GetDiskFreeSpaceA
GetCommandLineW
GlobalGetAtomNameA
LoadLibraryExW
ResumeThread
SetConsoleCtrlHandler
GetConsoleOutputCP
MultiByteToWideChar
GetStartupInfoW
GetSystemTimeAsFileTime
IsValidLocale
CreateMutexA
SuspendThread
GetLocaleInfoA
CompareStringW
FreeLibrary
GetConsoleScreenBufferInfo
AddAtomW
GetCurrentProcess
WriteConsoleW
HeapAlloc
TerminateProcess
ReadFile
RtlZeroMemory
EnumResourceNamesA
LoadLibraryA
GetShortPathNameA
TlsGetValue
CreateDirectoryW
LoadLibraryExA
FormatMessageW
GetMailslotInfo
GetNumberFormatW
GetCPInfo
WideCharToMultiByte
SetStdHandle
InterlockedCompareExchange
WriteFile
GetDateFormatA
DuplicateHandle
GetModuleHandleW
WaitForSingleObjectEx
SetLocaleInfoA
FlushFileBuffers
GetUserDefaultLCID
CloseHandle
LocalReAlloc
GetCurrentProcessId
GetTimeFormatA
HeapDestroy
VirtualFree
ExitThread
EnumResourceTypesW
RtlUnwind
GetUserDefaultLangID
SetConsoleCursorInfo
HeapReAlloc
EnterCriticalSection
ResetEvent
GetTickCount
CreateFileA
ReadConsoleInputA
InterlockedDecrement
VirtualQuery
GetEnvironmentStringsW
lstrcmpW
lstrlenA
InterlockedIncrement
GetFullPathNameW
CreateProcessW
SetUnhandledExceptionFilter
ReadConsoleOutputAttribute
GetProcAddress
InitializeCriticalSectionAndSpinCount
WriteConsoleInputA
GetModuleFileNameW
EnumSystemLocalesA
FindResourceW
AddAtomA
GetLastError
TlsAlloc
HeapCreate
OpenSemaphoreA
GetOEMCP
FindResourceExA
GetStartupInfoA
ConnectNamedPipe
ExitProcess
VirtualAlloc
GetThreadSelectorEntry
FindClose
InterlockedExchange
DeleteFileW
WriteConsoleA
FindNextFileW
LCMapStringA
UnlockFile
GetStringTypeA
LCMapStringW
Sleep
GetLocaleInfoW
GetCalendarInfoA
TlsFree
TlsSetValue
GetCurrentThread
CreateSemaphoreW
GetCurrentThreadId
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
CreateFileW
SetLastError
DeleteCriticalSection
GetFileAttributesExA
WriteConsoleOutputAttribute
IsDebuggerPresent
GetCurrentDirectoryW
GetConsoleMode
SetWaitableTimer
GetPrivateProfileIntW
GetStringTypeW
SetHandleCount
GetProcessHeaps
GetConsoleCP
CreateFileMappingA
OpenMutexA
SetFilePointer
GlobalFree
IsValidCodePage
UnhandledExceptionFilter
GetVersionExA
GetTimeZoneInformation
HeapSize
GetACP
QueryPerformanceCounter
FreeEnvironmentStringsW
RtlFillMemory
LeaveCriticalSection
CompareStringA
GetCommandLineA
WritePrivateProfileStringA
SystemTimeToFileTime
HeapFree
SetEnvironmentVariableA
wininet
InternetSetOptionExW
InternetGoOnlineA
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryExW
InternetConnectA
IncrementUrlCacheHeaderData
CreateUrlCacheGroup
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ