Static task
static1
Behavioral task
behavioral1
Sample
fd4e936bff7b247671c99a556c546cea8b1cb9d3be78eddf3e524dcbbc9e1a55.exe
Resource
win7-20240221-en
General
-
Target
fd4e936bff7b247671c99a556c546cea8b1cb9d3be78eddf3e524dcbbc9e1a55
-
Size
225KB
-
MD5
213f55f583d6215e3d05f2421dd04d0a
-
SHA1
f8307caa635ac65db6dde69b3a009083822c8df0
-
SHA256
fd4e936bff7b247671c99a556c546cea8b1cb9d3be78eddf3e524dcbbc9e1a55
-
SHA512
5ee65306b7ee15417dd7a5aa751dd3a12d1a2f587355652c0cef3ccffff91f870abfb139bd659e482f1d49a8a88516c1d557d252a4f272aa7acf550359e574fd
-
SSDEEP
3072:VSe5SusmVNMKeNILLn3bVdAvZwhZgPr5Nt3vO75lZYGX9rLFysmMXrUy/:118IP33oMZa53KlZYGXnyxMX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd4e936bff7b247671c99a556c546cea8b1cb9d3be78eddf3e524dcbbc9e1a55
Files
-
fd4e936bff7b247671c99a556c546cea8b1cb9d3be78eddf3e524dcbbc9e1a55.exe windows:4 windows x86 arch:x86
0184fbac2438306f556d751946a24411
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
OpenProcess
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcmpiA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
GetExitCodeProcess
DeleteFileA
Sleep
CreateEventA
OpenEventA
CloseHandle
OutputDebugStringA
CreateDirectoryA
SetFileAttributesA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
CreateProcessA
GetLocalTime
LoadLibraryA
FlushFileBuffers
GetSystemTimeAsFileTime
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetProcAddress
GetSystemInfo
VirtualQuery
HeapReAlloc
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
GetCommandLineA
GetProcessHeap
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
HeapSize
ExitProcess
GetCPInfo
GetOEMCP
IsValidCodePage
SetStdHandle
CreateFileA
HeapDestroy
HeapCreate
VirtualFree
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
user32
CharNextA
DestroyWindow
MessageBoxA
UnregisterClassA
DefWindowProcA
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
ole32
CoTaskMemRealloc
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
psapi
GetModuleBaseNameA
EnumProcessModules
EnumProcesses
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE