Static task
static1
Behavioral task
behavioral1
Sample
d46f910ba0b0dbc619641100c3118640.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d46f910ba0b0dbc619641100c3118640.exe
Resource
win10v2004-20240226-en
General
-
Target
d46f910ba0b0dbc619641100c3118640
-
Size
526KB
-
MD5
d46f910ba0b0dbc619641100c3118640
-
SHA1
6cad2b7c17140c3026d84979388bee88f5e340cf
-
SHA256
21c5e3260f48a290c2456238bf5bc33b3dac4422296961684528d5e779cfcd22
-
SHA512
3b33f6b6ed386ccfd004c016b6a2a8f942c47ecdd58d707160ef63fa9cb9b250c1c32a83ab463a5af98ccccba51596ea3152f16bdc8451bb5efe705d9f4ce856
-
SSDEEP
12288:GP8mdl4zLxtMFaA3MBfusxHoO4WSBCGYLOUWUuy:GP80mzMF0wUITBCGYL7WL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d46f910ba0b0dbc619641100c3118640
Files
-
d46f910ba0b0dbc619641100c3118640.exe windows:4 windows x86 arch:x86
2e9409df88f4ab4a10bf068a7379fa31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpOpenRequestW
user32
SetWindowLongA
OpenInputDesktop
OpenWindowStationW
DrawFrameControl
IsWindowVisible
InSendMessage
TranslateAccelerator
DdeReconnect
GetClassLongA
GetClassInfoExA
ShowOwnedPopups
MapVirtualKeyA
SetMessageExtraInfo
MapVirtualKeyExW
UnpackDDElParam
GetThreadDesktop
CreateWindowExW
RegisterClassExA
GetForegroundWindow
SetCursorPos
SubtractRect
DdeDisconnect
GetListBoxInfo
GetUserObjectInformationW
RegisterClassA
MapDialogRect
comctl32
InitCommonControlsEx
gdi32
GetBoundsRect
GetTextMetricsW
EnumFontsW
GetViewportExtEx
SetDIBColorTable
EnumObjects
GetMetaFileA
UpdateColors
GetRasterizerCaps
SetAbortProc
AbortDoc
GetStretchBltMode
ResetDCA
DeviceCapabilitiesExW
CreatePatternBrush
GetLayout
SetMetaRgn
GetMetaFileW
PolyBezierTo
GetCharABCWidthsFloatW
CreateCompatibleDC
PatBlt
IntersectClipRect
SelectClipPath
ResizePalette
kernel32
LCMapStringA
TlsSetValue
EnumSystemLocalesA
HeapDestroy
GetPriorityClass
GetUserDefaultLCID
ExitProcess
GetProcAddress
HeapCreate
GetVersionExA
GetSystemInfo
SetFilePointer
ReadFile
GetOEMCP
EnumCalendarInfoW
GetTimeFormatA
WideCharToMultiByte
GetStringTypeA
GetEnvironmentStrings
GetCPInfo
VirtualQuery
TlsFree
GetCurrentThreadId
GetCurrentProcess
LoadLibraryA
IsValidCodePage
GetDateFormatW
LeaveCriticalSection
GetFileType
QueryPerformanceCounter
GetACP
IsBadWritePtr
SetEnvironmentVariableA
SetFileAttributesW
CloseHandle
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetDateFormatA
DeleteCriticalSection
EnterCriticalSection
GetLocaleInfoA
GetLocaleInfoW
HeapSize
GetLastError
InitializeCriticalSection
TlsGetValue
GetModuleFileNameA
GetStdHandle
FreeResource
RaiseException
TerminateProcess
GetStartupInfoA
GetCurrentThread
InterlockedExchange
CompareStringW
VirtualFree
GetTickCount
GetTimeZoneInformation
GetEnvironmentStringsW
IsValidLocale
CreateMutexA
VirtualProtect
OpenFileMappingA
MultiByteToWideChar
LCMapStringW
HeapReAlloc
ReadConsoleOutputAttribute
OpenMutexA
GetSystemTimeAsFileTime
SetLastError
EnumSystemCodePagesW
SetStdHandle
FlushFileBuffers
CreateFileW
EnumSystemLocalesW
WriteConsoleOutputCharacterW
WriteFile
GetModuleHandleA
SetHandleCount
CompareStringA
TlsAlloc
GetCurrentProcessId
RtlUnwind
FreeEnvironmentStringsA
SetPriorityClass
GetPrivateProfileStringA
HeapAlloc
GetTimeFormatW
GetCommandLineA
CreateNamedPipeA
GetStringTypeW
HeapFree
WriteConsoleOutputA
comdlg32
PrintDlgW
ReplaceTextW
ChooseColorA
ReplaceTextA
shell32
FindExecutableA
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ