Static task
static1
Behavioral task
behavioral1
Sample
a4283d96d88ad36ec7ce37829add4ede.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a4283d96d88ad36ec7ce37829add4ede.exe
Resource
win10v2004-20240221-en
General
-
Target
a4283d96d88ad36ec7ce37829add4ede
-
Size
150KB
-
MD5
a4283d96d88ad36ec7ce37829add4ede
-
SHA1
39b1cf824b477c4daaf2179be8ae9d48930f099d
-
SHA256
6bb209c356dea5db62b63f2a41e5210eb390ad0bde02fc441c0707b57c14ec14
-
SHA512
dcca45e00977c4da237a766ea41940028ec9aeb7bd15717dfaa600f125a50ba85fad2db3bee14ee8e79bc1da14c2e031ba81a7dcde40f347c941dc65aa1f60b4
-
SSDEEP
3072:NqEuF3S9a9fbjx6fCVVFjXGBWklV9jYgyyxK:4/i9a9fb9tVFXwJYgJo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4283d96d88ad36ec7ce37829add4ede
Files
-
a4283d96d88ad36ec7ce37829add4ede.exe windows:1 windows x86 arch:x86
d6aaf9e6c259bd1c507bdb67bcff7643
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
GetModuleFileNameA
VirtualQueryEx
lstrcmpiA
DeleteCriticalSection
CreateFileA
GetVersion
lstrcatA
GetDateFormatA
WriteConsoleW
GetCurrentDirectoryA
GetStdHandle
GetDriveTypeA
VirtualAlloc
GetTimeFormatA
GetComputerNameW
SetEndOfFile
GetSystemDirectoryA
ReadProcessMemory
HeapAlloc
GetModuleHandleA
InterlockedExchange
GetFileType
GetSystemTimeAsFileTime
ExpandEnvironmentStringsA
WaitForSingleObject
ResetEvent
DeviceIoControl
WriteConsoleA
LeaveCriticalSection
LockResource
GetStartupInfoA
GetEnvironmentStringsW
RtlUnwind
FindResourceA
QueryPerformanceCounter
InterlockedIncrement
GetConsoleMode
MapViewOfFile
SetUnhandledExceptionFilter
Sleep
RaiseException
SetEnvironmentVariableA
GetACP
CreateThread
LCMapStringW
TlsFree
lstrlenA
TerminateThread
SearchPathA
Module32First
FlushFileBuffers
FormatMessageA
DeleteFileA
GetCurrentProcess
GetCPInfo
GetProcessAffinityMask
msvcrt
_except_handler3
wcstod
__setusermatherr
_tzname
_strnset
strrchr
_XcptFilter
_wfindfirst
_mbbtype
_strrev
_fdopen
_scalb
_getdrives
_ismbcl0
exit
_putenv
_exit
_wrmdir
__p__commode
__p__fmode
_lrotr
_adjust_fdiv
iswlower
_initterm
fscanf
iswcntrl
__getmainargs
fclose
_ismbslead
strtod
tanh
fprintf
strncat
_nextafter
_controlfp
_mbscpy
fflush
_heapmin
isleadbyte
_heapchk
freopen
_vsnprintf
__set_app_type
_filelengthi64
_putwch
_seh_longjmp_unwind
_mbccpy
wcslen
_mbsncpy
_mkdir
_ismbbalpha
memcpy
_acmdln
_mbscmp
wcscpy
scanf
_wcreat
_write
_wsopen
_fstat
_inp
swscanf
_filbuf
wctomb
wcstombs
_adj_fdiv_m64
user32
SetUserObjectSecurity
UnionRect
GetClientRect
ChildWindowFromPoint
GetWindowLongA
DrawFrameControl
WindowFromPoint
CreatePopupMenu
CreateWindowExA
SetWindowPlacement
SetWindowTextA
DefFrameProcA
AppendMenuA
FillRect
GetWindow
SetScrollInfo
InvalidateRect
GetPropA
InvalidateRgn
ModifyMenuA
IsZoomed
DrawIconEx
LoadIconA
LoadStringA
RegisterClassA
ExitWindowsEx
PtInRect
CopyRect
RedrawWindow
CloseClipboard
PostMessageA
OpenClipboard
IsDialogMessageA
GetCursorPos
ClientToScreen
GetDoubleClickTime
InflateRect
DeleteMenu
GetWindowThreadProcessId
SetForegroundWindow
EndDialog
DrawMenuBar
FrameRect
ShowWindowAsync
LoadAcceleratorsA
wsprintfA
RegisterClassExA
KillTimer
DrawEdge
GetMessageA
TrackPopupMenu
DefWindowProcA
DispatchMessageA
GetParent
ScreenToClient
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ