Static task
static1
Behavioral task
behavioral1
Sample
c411772721434300004e367f2473d1f2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c411772721434300004e367f2473d1f2.exe
Resource
win10v2004-20240226-en
General
-
Target
c411772721434300004e367f2473d1f2
-
Size
150KB
-
MD5
c411772721434300004e367f2473d1f2
-
SHA1
af777e5d9814d6af09b19245819b5ade980f0395
-
SHA256
a37736fc8614e857b376bc5b5bec35683aa2911126a1afdae5fbb36a17a87e00
-
SHA512
4bec0d1cd51ee9b82983442031892853832d7c4152165d398459acd3d231ade6e119e161f45ab78c0bfa3274f3e4a1def7bd5dfb1f03f66eafc822e9aa227183
-
SSDEEP
3072:RF3Lkb0lWikLkwlilUZg6nzLe9IEWHODN1VBD1PrEX0liZrhNV:RFwbQW5LkwYeZnz1uhLPrUtZrh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c411772721434300004e367f2473d1f2
Files
-
c411772721434300004e367f2473d1f2.exe windows:4 windows x86 arch:x86
1a237f866139e7a103f7b1e14c9a0d0d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GlobalUnWire
VirtualProtect
GetTickCount
HeapCompact
CreateEventA
GetNumberOfConsoleInputEvents
EnumSystemLocalesA
SetConsoleCP
GetModuleFileNameW
GetLastError
GetShortPathNameW
GetVersionExW
ReadConsoleInputExW
GetLocalTime
MoveFileW
user32
SetCursor
InvalidateRgn
DdeFreeStringHandle
GetInputState
GetWindowTextLengthW
TranslateAcceleratorW
DrawIconEx
GetProgmanWindow
SetMessageQueue
CreateIconFromResourceEx
VkKeyScanExW
IsCharLowerW
InternalGetWindowText
GetClassInfoExA
SetWindowsHookA
GetProcessDefaultLayout
PaintDesktop
GetNextDlgTabItem
MapVirtualKeyA
DialogBoxParamW
SetSysColors
GetSystemMetrics
CreateCaret
AdjustWindowRect
SetMenuItemInfoA
DeleteMenu
gdi32
GetCharABCWidthsFloatA
PATHOBJ_bEnumClipLines
PATHOBJ_vGetBounds
GetTransform
GetMetaRgn
GetMetaFileA
GdiArtificialDecrementDriver
PathToRegion
GdiConvertBitmapV5
ArcTo
GetObjectW
SelectClipPath
comdlg32
PrintDlgW
ChooseColorW
GetSaveFileNameA
GetOpenFileNameA
ReplaceTextW
WantArrows
dwOKSubclass
ChooseFontW
FindTextA
PrintDlgExA
LoadAlterBitmap
GetFileTitleA
Sections
.text Size: 4KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE