Static task
static1
Behavioral task
behavioral1
Sample
c4fb6a0d157fb824144a24248b631629.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c4fb6a0d157fb824144a24248b631629.exe
Resource
win10v2004-20240226-en
General
-
Target
c4fb6a0d157fb824144a24248b631629
-
Size
109KB
-
MD5
c4fb6a0d157fb824144a24248b631629
-
SHA1
2cd7d20e5eef970d74d2a5acfb9a01996d4b5a9e
-
SHA256
a2133bb2c4ddd8af928f0e00abbb2a9912cacb1a22fe85b5c6140cef813f6c9a
-
SHA512
ae4b82b2d80c049220879149bcd0242d5e322a8b4069a24f7acaa4ecaf2e07358a3f4c7fa36442434a0f281c276605cc19224f0c9bbe68641bfde65b765cb70b
-
SSDEEP
3072:N8U9AEa4ZEetOipyt9b2B/7F9e1gioFlOnnBhPbUl2UQ727c7h:NNs4ZsiptBe1gi4SnBhXKY7h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4fb6a0d157fb824144a24248b631629
Files
-
c4fb6a0d157fb824144a24248b631629.exe windows:1 windows x86 arch:x86
30fa6de709df6c9747a655c2fa5bbd2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDateFormatA
FindAtomW
GetModuleHandleA
VirtualAlloc
CopyFileExA
GetEnvironmentVariableW
GetVersionExA
MoveFileA
GetVersion
GetLogicalDriveStringsW
user32
GetKeyboardLayout
CharPrevA
GetMenuItemID
LoadImageA
InsertMenuW
UpdateWindow
SetScrollPos
GetClassLongW
GetFocus
GetTopWindow
wsprintfW
CheckMenuItem
GetMenuStringA
gdi32
CreateFontA
CreateCompatibleBitmap
CreateBrushIndirect
advapi32
RegQueryValueA
comdlg32
PrintDlgExA
GetSaveFileNameW
shell32
ExtractIconExW
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ