Static task
static1
Behavioral task
behavioral1
Sample
4b04213e1b0c00be987b4dc086556d78f5dc72c51bd156ae8b6ef77aaba0dc9e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4b04213e1b0c00be987b4dc086556d78f5dc72c51bd156ae8b6ef77aaba0dc9e.exe
Resource
win10v2004-20240226-en
General
-
Target
4b04213e1b0c00be987b4dc086556d78f5dc72c51bd156ae8b6ef77aaba0dc9e
-
Size
36KB
-
MD5
4e916edfa0caf246d5e2a025d8409d97
-
SHA1
38427320cc4def8bd330b3e4198198243365ac03
-
SHA256
4b04213e1b0c00be987b4dc086556d78f5dc72c51bd156ae8b6ef77aaba0dc9e
-
SHA512
546d699d6fd1a9f203303fc68e25be177e34d356124825443ff85141fbbe32dab3dc48d0804f4ebe74332918e5102c021d71d7e00665c219f5a2ce93e8390c72
-
SSDEEP
768:A/E+UlejKbjWwKtUZS6KUAghE3c1ng8o6dI:AC2tUZdHAMEyngBF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b04213e1b0c00be987b4dc086556d78f5dc72c51bd156ae8b6ef77aaba0dc9e
Files
-
4b04213e1b0c00be987b4dc086556d78f5dc72c51bd156ae8b6ef77aaba0dc9e.exe windows:4 windows x86 arch:x86
13169adaa55a4b4676c2eeddc904744e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
_controlfp
_except_handler3
__set_app_type
_XcptFilter
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
user32
PostQuitMessage
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
kernel32
lstrcpynA
GetFileType
CloseHandle
FindNextFileA
GetFileSize
DeleteFileA
FindFirstFileA
GetModuleHandleA
CreateFileA
GetStartupInfoA
GetLogicalDriveStringsA
GetEnvironmentStringsA
FindClose
GetModuleFileNameA
gdi32
CreateFontIndirectA
comctl32
ord17
shfolder
SHGetFolderPathA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ