Static task
static1
Behavioral task
behavioral1
Sample
4e02af097d89a9da4626712ace116951.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4e02af097d89a9da4626712ace116951.exe
Resource
win10v2004-20240508-en
General
-
Target
4e02af097d89a9da4626712ace116951.bin
-
Size
318KB
-
MD5
4e02af097d89a9da4626712ace116951
-
SHA1
9852c68c4ca1c042369657fd33b1cf9f8a90f325
-
SHA256
9de386b80e7445654a7f5b7a49648ed1efc319a3fbce1e8e91dcd94499998eb6
-
SHA512
9114ae9ed41d401a2e8b08f20a0785e7eea1b9421ac68bec79c90a5336d4bd70f8f9fcfd7c0fb7cd984ab16a4e362c462fb26b828c8e85775faf9ab03a6fd020
-
SSDEEP
6144:6sATeHUCwiQOW8bFX/+BTKkWiXdi87jIKXBOIWJoWurp:yeHvwiQgbFX/mT/XIkBBgyrp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e02af097d89a9da4626712ace116951.bin
Files
-
4e02af097d89a9da4626712ace116951.bin.exe windows:4 windows x86 arch:x86
4df756f3440c864d29844a33525b41d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
Heap32Next
GetVersionExW
GetTapePosition
GetProfileSectionA
ConnectNamedPipe
GetNumberFormatA
GetStartupInfoA
advapi32
GetSecurityDescriptorGroup
CloseServiceHandle
ObjectCloseAuditAlarmW
RegEnumValueA
AddAce
CreateServiceA
LsaSetInformationPolicy
MapGenericMask
SetFileSecurityA
DuplicateToken
BuildImpersonateTrusteeA
LsaLookupNames
RegNotifyChangeKeyValue
RegEnumKeyA
RegEnumValueW
QueryServiceConfigA
AllocateAndInitializeSid
AccessCheck
LsaQueryTrustedDomainInfoByName
CloseEventLog
LookupAccountNameA
RegReplaceKeyW
GetMultipleTrusteeW
LookupPrivilegeNameA
msvcrt
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
shlwapi
PathIsURLW
PathCombineW
PathRemoveBlanksA
PathFindFileNameA
PathSearchAndQualifyW
StrNCatW
PathRelativePathToA
PathIsSystemFolderW
PathIsPrefixW
SHRegWriteUSValueA
PathBuildRootW
PathGetDriveNumberA
SHRegDeleteUSValueA
SHOpenRegStreamA
SHQueryInfoKeyW
PathFileExistsW
PathAddExtensionW
PathIsUNCServerA
PathIsURLA
SHRegWriteUSValueW
PathParseIconLocationA
StrCSpnIA
PathIsUNCA
PathFindNextComponentW
PathFindOnPathA
PathIsRootW
SHGetValueW
StrCatW
PathGetArgsW
SHRegGetBoolUSValueA
SHDeleteKeyW
StrCSpnW
SHRegCreateUSKeyA
SHRegGetUSValueA
SHGetValueA
SHRegGetUSValueW
SHSetValueW
SHRegDeleteEmptyUSKeyW
SHQueryValueExA
PathRenameExtensionW
StrToIntA
PathStripPathA
PathQuoteSpacesA
PathSearchAndQualifyA
SHDeleteValueA
SHRegCreateUSKeyW
PathIsRelativeW
StrTrimW
PathCommonPrefixW
PathRemoveFileSpecW
PathStripToRootW
PathMatchSpecW
SHRegEnumUSKeyW
SHEnumValueW
PathSetDlgItemPathW
PathIsContentTypeW
StrCmpIW
PathIsRootA
PathCompactPathA
SHQueryValueExW
StrSpnA
StrCSpnIW
SHRegEnumUSValueW
PathIsFileSpecA
PathSkipRootW
StrIsIntlEqualW
PathCanonicalizeA
SHRegSetUSValueA
StrToIntExA
StrSpnW
PathCompactPathW
SHDeleteEmptyKeyA
PathStripPathW
ChrCmpIW
SHDeleteKeyA
PathMatchSpecA
PathUnquoteSpacesW
SHRegDeleteEmptyUSKeyA
StrCmpW
StrPBrkA
StrDupW
SHDeleteValueW
PathIsUNCServerShareA
PathRelativePathToW
SHSetValueA
PathGetDriveNumberW
PathRenameExtensionA
PathCommonPrefixA
PathAddExtensionA
PathCompactPathExW
SHRegEnumUSKeyA
PathMakePrettyA
PathIsSameRootW
SHRegOpenUSKeyA
PathCombineA
SHRegCloseUSKey
PathRemoveExtensionW
PathIsUNCServerShareW
PathIsUNCW
PathUnmakeSystemFolderW
PathIsRelativeA
SHRegQueryUSValueA
StrTrimA
PathRemoveBackslashA
PathIsDirectoryA
PathIsUNCServerW
SHRegOpenUSKeyW
ChrCmpIA
PathIsDirectoryW
SHRegGetBoolUSValueW
PathQuoteSpacesW
SHCreateShellPalette
StrFromTimeIntervalW
PathIsFileSpecW
SHRegQueryUSValueW
PathAddBackslashW
PathFindNextComponentA
StrToIntExW
PathRemoveArgsW
PathFindExtensionA
gdi32
RemoveFontResourceA
GetTextFaceW
GetTextMetricsW
MoveToEx
GetTextCharsetInfo
OffsetWindowOrgEx
CreateColorSpaceA
CreateColorSpaceW
GetOutlineTextMetricsA
ArcTo
GetPixel
IntersectClipRect
GetAspectRatioFilterEx
PtVisible
SetArcDirection
EndDoc
CreatePolygonRgn
GdiFlush
OffsetViewportOrgEx
GetTextMetricsA
CreateBitmapIndirect
GetPath
Chord
BeginPath
SetPolyFillMode
EnumFontsW
CancelDC
ResizePalette
ResetDCA
SetDIBits
SetICMMode
AddFontResourceA
CreateICA
SetSystemPaletteUse
GetEnhMetaFileBits
EnumFontFamiliesExW
GetObjectType
CreateHalftonePalette
GdiGetBatchLimit
GetDeviceGammaRamp
CreateFontA
GetClipBox
GetWinMetaFileBits
CreateDIBitmap
GetBkColor
GetTextFaceA
EnumFontFamiliesW
PlayMetaFile
SetTextColor
CreatePalette
CopyMetaFileA
SelectClipPath
ExtCreatePen
EnumFontFamiliesExA
PolylineTo
GetEnhMetaFileDescriptionA
GetTextExtentExPointA
GetBitmapDimensionEx
GetNearestPaletteIndex
UpdateColors
GetGraphicsMode
CreateDCA
GetMapMode
SetViewportOrgEx
PolyTextOutW
GetEnhMetaFileW
ScaleViewportExtEx
GetColorAdjustment
GetTextExtentPoint32W
GetFontData
SetColorSpace
GetCharWidth32A
ResetDCW
GetStockObject
GetLogColorSpaceA
Pie
CreateRectRgn
GetDCOrgEx
SetWindowExtEx
GetCurrentPositionEx
FixBrushOrgEx
GetROP2
GetEnhMetaFileHeader
PathToRegion
CreateBitmap
GetMetaFileA
CreateDIBPatternBrushPt
DPtoLP
DrawEscape
CloseEnhMetaFile
GetTextAlign
PtInRegion
GetBkMode
SetBoundsRect
GetArcDirection
GetLogColorSpaceW
SetGraphicsMode
SelectObject
GetBrushOrgEx
GetClipRgn
CreatePenIndirect
GetStretchBltMode
SetTextJustification
RoundRect
CloseMetaFile
PlayMetaFileRecord
GetMetaFileBitsEx
LineDDA
SetWinMetaFileBits
DeleteMetaFile
PolyDraw
AngleArc
StartDocA
CreateRectRgnIndirect
GetMetaFileW
CreateFontW
EnumICMProfilesW
GetGlyphOutlineW
GetWindowExtEx
GetTextExtentPointA
DeleteDC
SetICMProfileA
PlgBlt
RectVisible
AbortPath
FlattenPath
DeleteColorSpace
PlayEnhMetaFile
StrokeAndFillPath
GetNearestColor
GetSystemPaletteUse
SetWindowOrgEx
GetCharABCWidthsA
StretchBlt
RestoreDC
CreateFontIndirectA
Polygon
CreatePen
TextOutW
PolyBezierTo
SetROP2
LineTo
CreateMetaFileW
CreateEllipticRgn
GetDeviceCaps
SetStretchBltMode
ExtEscape
CreateDIBPatternBrush
CreateCompatibleDC
EndPath
BitBlt
StartPage
SetAbortProc
PatBlt
CreateDIBSection
GetCharWidth32W
CreateEnhMetaFileW
AbortDoc
CopyEnhMetaFileW
GetKerningPairsA
CopyMetaFileW
StrokePath
OffsetClipRgn
SetMetaRgn
ExtCreateRegion
GetCharWidthA
FillRgn
winmm
timeKillEvent
mmioClose
joyGetDevCapsA
mmioSendMessage
waveInGetErrorTextW
midiInAddBuffer
midiInPrepareHeader
waveInGetDevCapsW
midiStreamRestart
user32
SetWindowPlacement
GetUserObjectInformationA
CreatePopupMenu
GetSystemMetrics
EnumPropsA
GetClipboardViewer
EnumDesktopWindows
GetNextDlgTabItem
GetMenuItemInfoA
EnumPropsExA
version
GetFileVersionInfoSizeW
mpr
WNetConnectionDialog
WNetConnectionDialog1A
MultinetGetConnectionPerformanceW
WNetDisconnectDialog
WNetCancelConnectionW
WNetGetUniversalNameW
WNetOpenEnumA
WNetOpenEnumW
WNetGetUniversalNameA
WNetGetUserW
WNetEnumResourceW
WNetGetConnectionW
WNetGetProviderNameA
WNetConnectionDialog1W
WNetCancelConnection2A
winspool.drv
SetPrinterA
FreePrinterNotifyInfo
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ