Static task
static1
Behavioral task
behavioral1
Sample
a46c26bea19b53cd4e644b6b13302e9d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a46c26bea19b53cd4e644b6b13302e9d.exe
Resource
win10v2004-20240221-en
General
-
Target
a46c26bea19b53cd4e644b6b13302e9d
-
Size
486KB
-
MD5
a46c26bea19b53cd4e644b6b13302e9d
-
SHA1
1b2dce274d4e6132e6f1c67d6f2efc20bde18249
-
SHA256
2cf6564952483aab6b1e28510d8fb09bcbf9a6fdc0449cfdab6955839cea6cf3
-
SHA512
33a3f364ce09e5268982dabdb7779f0179ac550a8e66650324988eae2350203f9212ccf1aac405d901ba42fda8850f591c12e80f6dee736554af6d3047f179e2
-
SSDEEP
12288:oopFRInlbf8+Q2TzW7yJBoQLrJyE/HeUhHuWWfz+/Mz+EYhLT:oopFRIlbJnzGyJBoQLNyA+auWSznEn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a46c26bea19b53cd4e644b6b13302e9d
Files
-
a46c26bea19b53cd4e644b6b13302e9d.exe windows:4 windows x86 arch:x86
399524fb1f974d0628fa400dfa319bd3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsA
kernel32
FreeLibrary
LoadLibraryA
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
FlushFileBuffers
SetEndOfFile
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetACP
RaiseException
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
lstrcatA
CloseHandle
GetFileSize
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
lstrcpyA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalFree
LocalAlloc
GetVersion
EnterCriticalSection
CreateFileA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
GetLastError
SetLastError
lstrcmpA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
RemoveDirectoryA
FindFirstFileA
CopyFileA
MoveFileA
FindNextFileA
FindClose
DeleteFileA
Sleep
GetModuleFileNameA
GetSystemDirectoryA
WriteFile
SetFileTime
CreateDirectoryA
DosDateTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
GetCurrentProcess
DuplicateHandle
GetFileType
SetFilePointer
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
IsBadReadPtr
UnmapViewOfFile
user32
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
MessageBoxA
DialogBoxParamA
EnableWindow
GetDlgItem
PostQuitMessage
EndDialog
GetWindowLongA
SendMessageA
UnhookWindowsHookEx
LoadStringA
LoadBitmapA
gdi32
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DeleteObject
GetDeviceCaps
GetObjectA
SetBkColor
GetClipBox
CreateBitmap
CreatePen
SetBkMode
SetTextColor
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
comctl32
ord17
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ