Static task
static1
Behavioral task
behavioral1
Sample
c4dec23e0d1844aaddafc4577943dd0d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4dec23e0d1844aaddafc4577943dd0d.exe
Resource
win10v2004-20231215-en
General
-
Target
c4dec23e0d1844aaddafc4577943dd0d
-
Size
116KB
-
MD5
c4dec23e0d1844aaddafc4577943dd0d
-
SHA1
2c251f483a5a039d8c141532e8a913478fb3a7aa
-
SHA256
47611e4f46db00f62cc4c47345bc2b255e357f9c56b709cd0d00b9a958ca00e0
-
SHA512
61fdf6c9a58068e70f0c34ea1d1c8b408218d0a0ee24bf1a9710c6989c4e407f5c3886c4321c969be040fdcbeeceff3cd9985c9df86edaf371995e3e8833f118
-
SSDEEP
3072:dec0fauW3dVNwyCRMZ2rFKFV50DfWIVzz92s64TIDRK:dex7W3dtMMZBX50DpVz4qIDRK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4dec23e0d1844aaddafc4577943dd0d
Files
-
c4dec23e0d1844aaddafc4577943dd0d.exe windows:4 windows x86 arch:x86
b737bc5ff32e023eddad683664650547
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
ShowOwnedPopups
DeferWindowPos
IsWindowVisible
CloseWindow
GetWindowTextLengthA
GetDlgItemInt
IsWindowUnicode
EnumThreadWindows
GetSysColor
SetDlgItemTextA
SetWindowPos
GetWindowTextA
ole32
CoTaskMemRealloc
OleCreateEmbeddingHelper
CoLockObjectExternal
FreePropVariantArray
GetHGlobalFromILockBytes
CoIsOle1Class
CreateDataCache
OleQueryCreateFromData
OleSetMenuDescriptor
OleFlushClipboard
OleRegGetUserType
CoGetTreatAsClass
OleSetClipboard
OleNoteObjectVisible
kernel32
LocalHandle
GetModuleHandleA
SuspendThread
CloseHandle
SetEvent
ResumeThread
VirtualAlloc
GetExitCodeThread
OpenEventA
OpenMutexA
ReleaseMutex
ResetEvent
GetProcAddress
IsBadReadPtr
HeapFree
HeapLock
GetStringTypeW
GetSystemDefaultLangID
GetStartupInfoA
IsValidCodePage
IsBadCodePtr
GetSystemDefaultLCID
LocalFree
OpenSemaphoreA
VirtualFree
msvcrt
exit
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ