Static task
static1
Behavioral task
behavioral1
Sample
c4130fa48f0ea04c57853d492559ea07.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c4130fa48f0ea04c57853d492559ea07.exe
Resource
win10v2004-20240226-en
General
-
Target
c4130fa48f0ea04c57853d492559ea07
-
Size
90KB
-
MD5
c4130fa48f0ea04c57853d492559ea07
-
SHA1
968ab27c31802917591e059d61e5d288d7d7238e
-
SHA256
9de51b1fca7b211c0ac68c8409d7c77bcac9a8d3231a75ded7b4fbc33da237c7
-
SHA512
9d62c40c81f8d927becb7946d930d55496c9d5b9d2fba80d32249cffdcf62e56895d92dd3b675eccc04ae6788f8ebbdaa596fcd269e89fe7e29e472bb2029bc9
-
SSDEEP
1536:0bv9bJ8pAMOt/cfURCDuoKmwPj8Z6KpKR/5FildPdSnfv1ViJpkpJ8d3NSQ1lxyy:0BbJ8pAj/cMRCaVZYZ6eg/iVpkn63NJ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4130fa48f0ea04c57853d492559ea07
Files
-
c4130fa48f0ea04c57853d492559ea07.exe windows:5 windows x86 arch:x86
38aa59fa29e164f8e1d90c0b8faae7e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
lstrcatA
GetProcAddress
GetModuleHandleA
CloseHandle
VirtualAlloc
MapViewOfFileEx
VirtualFree
UnmapViewOfFile
user32
LoadIconA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 512B - Virtual size: 13B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 512B - Virtual size: 18B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 512B - Virtual size: 18B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ