Static task
static1
Behavioral task
behavioral1
Sample
46c2ca2433997d3ad848eab5ffa89710N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46c2ca2433997d3ad848eab5ffa89710N.exe
Resource
win10v2004-20240709-en
General
-
Target
46c2ca2433997d3ad848eab5ffa89710N.exe
-
Size
17KB
-
MD5
46c2ca2433997d3ad848eab5ffa89710
-
SHA1
ee13d2f59899105640c1a3ee59c1e58bf711a0a1
-
SHA256
5aefd36c411d2b7eeff391d111c9e08a66d424fc050ed0f12f26912c0f2ba0cd
-
SHA512
04491a4e0be81350af91c0994ece573bb554f4b79234ca325e85e344fe1ce54ff1be18817730b2f9c87476591581eff31db243e236a268e4c1530f9b03bb3834
-
SSDEEP
384:WiEjgKKRnVL1QymKyczfSvGm18zSJOchiyMq:jhhnVBdmKJf818zSJOcEyM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46c2ca2433997d3ad848eab5ffa89710N.exe
Files
-
46c2ca2433997d3ad848eab5ffa89710N.exe.exe windows:4 windows x86 arch:x86
b8f8579b2dd41ffb53abd1fd63bea584
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
WinExec
GetCurrentProcessId
CopyFileA
DeleteFileA
WaitForSingleObject
TerminateProcess
OpenProcess
GetCommandLineA
CloseHandle
GetModuleFileNameA
GetTempPathA
CreateRemoteThread
GlobalLock
GlobalAlloc
WriteProcessMemory
VirtualAllocEx
GetProcAddress
LoadLibraryA
GetStartupInfoA
GetModuleHandleA
FindResourceA
VirtualProtectEx
SizeofResource
LoadResource
LockResource
Sleep
CreateThread
user32
FindWindowExA
FindWindowA
SendMessageA
advapi32
RegOpenKeyExA
RegCloseKey
RegSetValueExA
winmm
mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
msvcrt
strlen
_controlfp
_except_handler3
__set_app_type
memcpy
memset
fclose
fseek
fwrite
fopen
sprintf
strncpy
sscanf
strchr
strcpy
strrchr
_stricmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ