Static task
static1
Behavioral task
behavioral1
Sample
c4fe844476d9fab8fbbe1212c7fdc3c9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4fe844476d9fab8fbbe1212c7fdc3c9.exe
Resource
win10v2004-20240226-en
General
-
Target
c4fe844476d9fab8fbbe1212c7fdc3c9
-
Size
276KB
-
MD5
c4fe844476d9fab8fbbe1212c7fdc3c9
-
SHA1
28bd386f6fbf3793f9c9a6aec9a7c2f674a66a22
-
SHA256
f7613f02ab08832cf55eb80856f8fc34fd4554e9a566e5d39cc595fe98a942f4
-
SHA512
a921b14920fecb3bab9bd824d04920a88a38eab3db777f86dae8771d012aa22b7d555b092342b0bb492914e23ee65c2494c9244e4692b210e9110b095d160081
-
SSDEEP
6144:6S6NUncVxMs6gFeMIPhdmSSIxKFp/cSdoV5NupL6p4pOP7:6S6QcwQFeTsS9xI/Jdg44Gp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4fe844476d9fab8fbbe1212c7fdc3c9
Files
-
c4fe844476d9fab8fbbe1212c7fdc3c9.exe windows:4 windows x86 arch:x86
8169bd3c169285a3f71ecca3a3128f0f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetOpenEnumA
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIcon
wininet
InternetReadFile
wsock32
WSACleanup
winmm
waveOutWrite
avicap32
capCreateCaptureWindowA
msacm32
acmFormatChooseA
ws2_32
WSAIoctl
Sections
daneil Size: 262KB - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fish Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fish Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fish Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fish Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE