Static task
static1
Behavioral task
behavioral1
Sample
i4jdel0.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
i4jdel0.exe
Resource
win7-20240419-en
Behavioral task
behavioral3
Sample
i4jdel0.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
i4jdel0.exe
Resource
win11-20240508-en
General
-
Target
i4jdel0.exe
-
Size
34KB
-
MD5
de395adb369470a953a11b8c300697e2
-
SHA1
4ef637725c61929fe0d5d438ff50b57b7087a752
-
SHA256
9090e674834008f3bfad5d19cc9b1b44702700d337ac26628d2c9076ada09e60
-
SHA512
96f446498bf88f4d88a74ae29113358c4f3de5f2a0cece248c21d4233b33e5d38d200053b9b3835836ad4600215e19bd9046f626ff76624f1053fcdccb54bd45
-
SSDEEP
384:UXiDnlCwLJFJhFqgR6VO0c4CvQTAHH+Q15gVGiNYaqyyun4gg+BquVnOPLonS:UAUwLlh4gALc4C4TAnB0Yay215DnRS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource i4jdel0.exe
Files
-
i4jdel0.exe.exe windows:4 windows x86 arch:x86
e686a6644c95a0bfd52eaee5ef0d78cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegSetValueExA
comctl32
InitCommonControls
kernel32
CloseHandle
CreateSemaphoreA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempFileNameA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
LoadLibraryA
MoveFileExA
RemoveDirectoryA
SetCurrentDirectoryA
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__set_app_type
_cexit
_fileno
_fmode
_fpreset
_iob
_mkdir
_rmdir
_setmode
atexit
fclose
fgets
fgetws
fopen
rand
signal
sprintf
srand
strchr
strcpy
strstr
time
wcscat
wcscpy
wcslen
wcsncmp
user32
ExitWindowsEx
MessageBoxW
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE