Static task
static1
Behavioral task
behavioral1
Sample
random4.exe
Resource
win7-20240903-en
General
-
Target
random4.exe
-
Size
420KB
-
MD5
b17d497a84216ae3675de20e6c79cf48
-
SHA1
ee08f8f561dbad3076eb686c6eaea786fadf0595
-
SHA256
5e6287dda9d4b7dc730feb5975790a61d3cefd3717fdd36e0eac749db904dfa9
-
SHA512
629ac269c34dd59fa9aa4134d14f8ceeb932c7605998bfdc939fe612e607027c94265edfa54c52756f68a65b37d5948c70e49e1cb03907051c19b3b8090828be
-
SSDEEP
6144:eFhb7fvQQnkO+gasbN+cNJy0ikkPrrYIygbuxRpH4/g2wLbO9:eFhb7gQkngaey4IJbYpH4I22bO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource random4.exe
Files
-
random4.exe.exe windows:5 windows x86 arch:x86
b65d7fe8bb6df3db3dff403f8ae151f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoW
InterlockedDecrement
GetCurrentProcess
SetEnvironmentVariableW
CreateJobObjectW
CreateHardLinkA
GetModuleHandleW
GetNumberFormatA
GetWindowsDirectoryA
SetCommState
LoadLibraryW
GetLocaleInfoW
ReadConsoleInputA
GetCalendarInfoW
SetVolumeMountPointA
GetConsoleAliasExesLengthW
GetVersionExW
GetFileAttributesA
EnumSystemCodePagesA
GetTimeFormatW
GetFileAttributesW
GetModuleFileNameW
CreateActCtxA
GetEnvironmentVariableA
SetThreadPriority
GetTempPathW
GetShortPathNameA
VerifyVersionInfoW
GlobalUnfix
GetStdHandle
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
GetLongPathNameW
InterlockedIncrement
CreateNamedPipeA
SetComputerNameA
LoadModule
GlobalFree
GetProcessVersion
LoadLibraryA
InterlockedExchangeAdd
CreateFileMappingA
LocalAlloc
SetCalendarInfoW
CreateEventW
FoldStringA
EnumDateFormatsA
GlobalUnWire
LoadLibraryExA
GetFileTime
WaitForDebugEvent
OpenEventW
SetProcessShutdownParameters
SetFileShortNameA
GetDiskFreeSpaceExW
EnumCalendarInfoExA
LCMapStringW
CreateFileW
GetStringTypeW
CloseHandle
MultiByteToWideChar
WriteConsoleW
FlushFileBuffers
CommConfigDialogA
GetConsoleAliasExesA
TlsGetValue
SetFilePointer
GetProcAddress
SetDefaultCommConfigA
SetStdHandle
HeapFree
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
WideCharToMultiByte
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
HeapCreate
Sleep
HeapSize
ExitProcess
HeapAlloc
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
user32
CharLowerBuffA
SetCaretPos
LoadMenuA
CharUpperA
GetWindowLongA
InsertMenuItemW
GetSysColor
GetMenuStringA
SetMenu
gdi32
GetBkMode
CreateDCW
GetCharWidth32W
GetTextCharset
GetCharWidthI
winhttp
WinHttpCloseHandle
Sections
.text Size: 299KB - Virtual size: 299KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ