Static task
static1
Behavioral task
behavioral1
Sample
40471946b89e283779249d9fb5d80b51a513d879c116b7726ae1159347851e2a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
40471946b89e283779249d9fb5d80b51a513d879c116b7726ae1159347851e2a.exe
Resource
win10v2004-20240419-en
General
-
Target
40471946b89e283779249d9fb5d80b51a513d879c116b7726ae1159347851e2a
-
Size
30KB
-
MD5
4bceba2b2dff796bf4188a95d3c94292
-
SHA1
e3d271d1e1de09553b8c76eb7ec275c48fac0829
-
SHA256
40471946b89e283779249d9fb5d80b51a513d879c116b7726ae1159347851e2a
-
SHA512
12d606564a283080168ff6a8241e0a8e8b86ae0c83687a93e8e727c48037d2e6cb2bf543d9043b00661d9a8a065ff597f4bc05c763153b93138bf151533c5345
-
SSDEEP
384:CV6wM2h3ln/3m0p/Qhlg8dgQBY8hrBpj6480BpLe2MJ0W8xjUNE:Q6K7fJKFiQTrLjdTLTW8xwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40471946b89e283779249d9fb5d80b51a513d879c116b7726ae1159347851e2a
Files
-
40471946b89e283779249d9fb5d80b51a513d879c116b7726ae1159347851e2a.exe windows:4 windows x86 arch:x86
93ef196156d6da1d4462ba7d424ca7b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
GetMessageA
EndPaint
ShowWindow
UpdateWindow
DrawTextA
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
MessageBoxA
DefWindowProcA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
PostQuitMessage
GetWindowRect
kernel32
GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetCurrentProcess
GetSystemTimeAsFileTime
CreateFileA
gdi32
CreateFontIndirectA
DeleteObject
CreateCompatibleDC
CreateSolidBrush
CreatePen
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ