Static task
static1
Behavioral task
behavioral1
Sample
c4a33a9238f90d6dc0d40c6e54a62fcd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4a33a9238f90d6dc0d40c6e54a62fcd.exe
Resource
win10v2004-20231215-en
General
-
Target
c4a33a9238f90d6dc0d40c6e54a62fcd
-
Size
320KB
-
MD5
c4a33a9238f90d6dc0d40c6e54a62fcd
-
SHA1
8b4a55cc273e74c7861d29cae6628cf32652d6a6
-
SHA256
a753388662f41051d7ab1f1655bb5b47ed192bef8b7e91b30a90b0907d9b4db3
-
SHA512
71ec6bfbe8332e163f7f134d42ecf38b67227bf0feeebe49bd948a16d77005e0d33d67ce0291de0be53e071679b62a3b80aa7ba593de7c06a031f3cfa2df9914
-
SSDEEP
6144:m2AnaFZ2klCPGcZteUGprlEAG59Sd4SyUPKZyXn8z:HACZTlC1feUGvEAG59SySxKsX8z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4a33a9238f90d6dc0d40c6e54a62fcd
Files
-
c4a33a9238f90d6dc0d40c6e54a62fcd.exe windows:5 windows x86 arch:x86
9531c0b03c49273568fbca59fdc78e9e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextCharacterExtra
GetMetaRgn
GetTextColor
GetFontUnicodeRanges
GetSystemPaletteUse
GetClipRgn
SetPixel
GetObjectType
GetCurrentObject
GetNearestColor
GetFontLanguageInfo
GetDCPenColor
GetTextCharsetInfo
GetRandomRgn
UpdateColors
GetPixelFormat
SetTextJustification
GetStretchBltMode
GetTextCharset
GetPolyFillMode
GetDeviceCaps
GetBkColor
SetTextAlign
GetDCBrushColor
user32
GetDlgItemInt
GetDlgItem
EndPaint
GetKeyboardType
LoadIconA
GetWindowLongA
GetMenuContextHelpId
GetQueueStatus
GetMenuCheckMarkDimensions
GetMenuState
WindowFromDC
GetForegroundWindow
EnableWindow
EndDialog
ShowWindow
SetDlgItemTextA
GetWindowDC
SendMessageA
CallWindowProcA
GetMenuItemID
SetWindowTextA
GetCursor
DrawTextA
PostMessageA
IsWindowUnicode
RemovePropA
GetMenuItemCount
GetScrollPos
GetInputState
MoveWindow
kernel32
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CreateFileW
HeapReAlloc
GetStringTypeW
WriteConsoleW
HeapSize
LCMapStringW
GetTimeZoneInformation
ReadFile
MultiByteToWideChar
SetEndOfFile
SetStdHandle
GetDriveTypeW
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
GetDriveTypeA
GetFileType
WriteFile
GetProcessHeap
SetFilePointer
LockResource
LoadResource
FlushFileBuffers
LocalFlags
GlobalHandle
IsDebuggerPresent
GetCurrentProcess
GetCurrentProcessId
CloseHandle
IsProcessorFeaturePresent
GetCurrentThreadId
FindClose
GetFileTime
GlobalFlags
GetVersion
GetLastError
DeleteFileA
MoveFileA
GetProcAddress
GetTickCount
GetStdHandle
CreateThread
GetModuleHandleA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EncodePointer
DecodePointer
TerminateProcess
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileExA
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
HeapCreate
HeapDestroy
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
GetCurrentDirectoryW
SetCurrentDirectoryW
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetHandleCount
RtlUnwind
SetConsoleCtrlHandler
Sections
.text Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ