Static task
static1
Behavioral task
behavioral1
Sample
4.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4.exe
Resource
win10v2004-20240802-en
General
-
Target
4.exe_
-
Size
252KB
-
MD5
9f54656f1ed5a09933ee200fae4558a6
-
SHA1
a1bdaa533e0c6017a50bd9fa73188f570478a84e
-
SHA256
9a45687031fc1e8dd5b165832c016d02de4ca68805978fc8fec5397f93c8c088
-
SHA512
11ee2eb9bae70d3fab6ccba8f1d6fcf317bff3c9351665e444b1c8ca635b028259a671e1fecf72d83d7c40001785900f5937d8eabba121009129359edec68214
-
SSDEEP
6144:7RnYrmfNI9hSht7jKk68wR7WzDbnSoo5WCXIuW5s6AeF:7RnY6FIjSht7jKp8wqSoo5WCYuWaFeF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4.exe_
Files
-
4.exe_.exe windows:6 windows x86 arch:x86
67fa2c785bdd0f0e0c3cb5a0713f1e16
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CreateEventW
CreateThread
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
DecodePointer
WriteConsoleW
HeapSize
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
SetStdHandle
HeapReAlloc
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetTimeZoneInformation
HeapFree
GetCurrentProcess
MultiByteToWideChar
GetLastError
CloseHandle
HeapAlloc
GetProcAddress
LocalFree
ExitProcess
GetProcessHeap
GetModuleHandleW
WideCharToMultiByte
SetUnhandledExceptionFilter
LoadLibraryA
FormatMessageA
GetCurrentThreadId
WaitForSingleObjectEx
GetExitCodeThread
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
QueryPerformanceCounter
EnterCriticalSection
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetFileType
GetCPInfo
GetModuleFileNameW
GetStdHandle
WriteFile
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
TryEnterCriticalSection
user32
EndPaint
BeginPaint
UpdateWindow
PostQuitMessage
LoadCursorW
TranslateMessage
GetMessageW
DefWindowProcW
DestroyWindow
CreateWindowExW
RegisterClassExW
LoadAcceleratorsW
ShowWindow
DispatchMessageW
TranslateAcceleratorW
gdiplus
GdipSaveImageToStream
GdipGetImageEncodersSize
GdipFree
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipAlloc
GdipCloneImage
GdipGetImageEncoders
Sections
.text Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ