Static task
static1
Behavioral task
behavioral1
Sample
4121f0a16eb4acd2af40ae330ddbb79d83ec1d96dd51a9fcf8fc38b45ccc1ed9.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4121f0a16eb4acd2af40ae330ddbb79d83ec1d96dd51a9fcf8fc38b45ccc1ed9.exe
Resource
win10v2004-20241007-en
General
-
Target
4121f0a16eb4acd2af40ae330ddbb79d83ec1d96dd51a9fcf8fc38b45ccc1ed9
-
Size
153KB
-
MD5
4e1010f1f988aae4964b439fd9e699b1
-
SHA1
6225e998666e0cdae4eff97f1b5baec63d53b079
-
SHA256
4121f0a16eb4acd2af40ae330ddbb79d83ec1d96dd51a9fcf8fc38b45ccc1ed9
-
SHA512
ea1467d35242ba3ab6dfa83f4d2d9eacc85eddf7011cb63e21088a368d13c313f43966b08355edebd9e9e2b70efe9125000f6b27bbb5b3ba0a3604561cb9b52a
-
SSDEEP
3072:D0QHT060G93zjfvLHdypm0ARQEBp7m3HVHdGp:D0iT0x83zjfvLHdyc0AR3mh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4121f0a16eb4acd2af40ae330ddbb79d83ec1d96dd51a9fcf8fc38b45ccc1ed9
Files
-
4121f0a16eb4acd2af40ae330ddbb79d83ec1d96dd51a9fcf8fc38b45ccc1ed9.exe windows:4 windows x86 arch:x86
57f73824000da3e0a03acf8e57dcabc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
odbc32
ord9
ord141
ord31
ord75
ord111
ord24
mpr
WNetCancelConnection2W
comctl32
InitCommonControlsEx
kernel32
SetFilePointer
WriteFile
GetFileSize
CreateFileW
lstrcpyW
OutputDebugStringW
FlushFileBuffers
lstrlenW
lstrcmpW
lstrcmpiW
lstrcatW
GetLastError
DeleteFileW
GetModuleHandleA
GetStartupInfoA
GetTempFileNameW
CopyFileW
GetFileAttributesW
GetTempPathW
GetProcAddress
LoadLibraryW
FreeLibrary
GetComputerNameW
HeapReAlloc
LocalFree
LocalAlloc
ReadProcessMemory
OpenProcess
EnterCriticalSection
SetFileAttributesW
SetLastError
RemoveDirectoryW
CreateProcessW
GetPrivateProfileIntW
WritePrivateProfileStringW
WinExec
GetShortPathNameW
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFree
GetCommandLineW
CreateThread
FindResourceW
LoadResource
LockResource
GetModuleFileNameW
lstrcpynW
GetDiskFreeSpaceExW
HeapAlloc
Sleep
GetExitCodeThread
CloseHandle
GetVersionExA
GetProcessHeap
HeapFree
GetCurrentProcess
MoveFileExW
CreateDirectoryW
user32
SystemParametersInfoW
MessageBoxA
LoadStringA
MessageBoxW
UpdateWindow
ShowWindow
LoadStringW
SendMessageW
wsprintfW
SetWindowTextW
CreateDialogParamW
LoadIconW
DefWindowProcW
EndDialog
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
DestroyWindow
SetWindowPos
GetSystemMetrics
GetWindowRect
CharLowerBuffW
SendMessageTimeoutW
DialogBoxParamW
RegisterClassExW
LoadCursorW
GetDlgItem
gdi32
CreateFontIndirectW
DeleteObject
advapi32
RegDeleteKeyW
RegEnumKeyExW
RegCreateKeyExW
QueryServiceConfigW
ChangeServiceConfigW
StartServiceW
RegOpenKeyExW
EnumDependentServicesW
RegCloseKey
OpenServiceW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegSaveKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ControlService
RegRestoreKeyW
RegConnectRegistryW
CloseServiceHandle
CreateServiceW
OpenSCManagerW
QueryServiceStatus
DeleteService
shell32
SHChangeNotify
CommandLineToArgvW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
CoCreateGuid
StringFromGUID2
msvcrt
__p__commode
__set_app_type
__p__fmode
_wstrdate
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_except_handler3
_ltow
_wcslwr
wcsstr
_wcsnicmp
_wtoi
__dllonexit
_wstrtime
_vsnwprintf
wcsrchr
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_controlfp
_onexit
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE