Static task
static1
Behavioral task
behavioral1
Sample
d4c4341a7e9e67e8ad8f28b0df5b2722.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d4c4341a7e9e67e8ad8f28b0df5b2722.exe
Resource
win10v2004-20240226-en
General
-
Target
d4c4341a7e9e67e8ad8f28b0df5b2722
-
Size
534KB
-
MD5
d4c4341a7e9e67e8ad8f28b0df5b2722
-
SHA1
d25ba89b1ded35e3054a4de062f13675fdcb17cb
-
SHA256
bb2dc9f4169508e64fcc9f18fa7eddc49d0be6e345308cfd643a9125f49b759d
-
SHA512
78e0d47b56986a764db2c7254b61b3aff3b2649bf4ea9f36868e0e89d54fc69bfeb201b18f4a62a4840405591eda53e9a7d0fc1046c878f4940ae5e84a05c7fa
-
SSDEEP
12288:Yu1Ic7mnOZ7fkd7zYB8mO2DSJd+lu4Iarda:NIcKsbqi9HDhlvVha
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4c4341a7e9e67e8ad8f28b0df5b2722
Files
-
d4c4341a7e9e67e8ad8f28b0df5b2722.exe windows:4 windows x86 arch:x86
3eba3cdfe3befa8425dd4cba8b175f49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_LoadImageA
ImageList_GetIcon
ImageList_DrawIndirect
ImageList_SetDragCursorImage
InitMUILanguage
InitCommonControlsEx
MakeDragList
ImageList_GetIconSize
user32
MonitorFromPoint
WINNLSEnableIME
SetProcessDefaultLayout
ShowOwnedPopups
SetMenuItemBitmaps
SetCursorPos
ModifyMenuW
SetClipboardViewer
DrawAnimatedRects
SetMenuContextHelpId
MoveWindow
CreateWindowExA
ActivateKeyboardLayout
DestroyWindow
DefWindowProcW
GetMenuStringW
RegisterClassA
OpenDesktopA
PackDDElParam
SetDoubleClickTime
IsCharAlphaW
SystemParametersInfoW
MessageBoxW
DlgDirSelectExA
LoadKeyboardLayoutW
ShowWindow
RegisterClassExA
WindowFromDC
IsCharLowerA
EnumPropsExW
DdeDisconnectList
DrawIconEx
kernel32
LCMapStringW
SetFilePointer
GetOEMCP
GetConsoleOutputCP
VirtualAlloc
IsValidCodePage
GetProcAddress
HeapFree
GlobalSize
ReadFile
TlsGetValue
GetModuleHandleW
SetConsoleCtrlHandler
EnumResourceLanguagesW
GetConsoleCP
LoadLibraryA
WideCharToMultiByte
GetCPInfo
InterlockedDecrement
GetDateFormatA
GetStringTypeW
CreateRemoteThread
CreateFileA
ExitProcess
TerminateProcess
CompareStringW
InterlockedIncrement
GetStdHandle
GetCurrentProcessId
HeapCreate
SetEnvironmentVariableA
lstrcpyA
GetSystemTimeAsFileTime
TlsFree
FreeEnvironmentStringsA
GetLocaleInfoA
SetStdHandle
HeapSize
GetCurrentThread
GetACP
GetLocaleInfoW
Sleep
GetTimeFormatA
IsValidLocale
GetCommandLineA
LeaveCriticalSection
CompareStringA
HeapDestroy
EnumSystemLocalesA
TlsAlloc
GetStringTypeA
TlsSetValue
ConvertDefaultLocale
SetUnhandledExceptionFilter
WriteConsoleA
GetTimeZoneInformation
GetLastError
CloseHandle
ResumeThread
GetVolumeInformationW
SetHandleCount
WriteConsoleW
FreeLibrary
QueryPerformanceCounter
GetModuleHandleA
WriteFile
InitializeCriticalSectionAndSpinCount
ReadConsoleOutputCharacterW
GetEnvironmentStrings
GetConsoleMode
GetTickCount
GetCurrentThreadId
InterlockedExchange
VirtualQuery
GetModuleFileNameA
VirtualFree
WritePrivateProfileSectionA
DeleteCriticalSection
UnhandledExceptionFilter
MultiByteToWideChar
CreateMutexA
GetStartupInfoA
OpenMutexA
EnterCriticalSection
GetCurrentProcess
FreeEnvironmentStringsW
LCMapStringA
SetLastError
GetUserDefaultLCID
GetNamedPipeHandleStateW
GetFileType
GetEnvironmentStringsW
RtlUnwind
SetConsoleTitleW
GetUserDefaultLangID
IsDebuggerPresent
HeapReAlloc
FlushFileBuffers
HeapAlloc
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 243KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ