Static task
static1
Behavioral task
behavioral1
Sample
4e4fd475fb3745332eec28ef818797001cc1bdd6c3f35420d5d41f4b719f264b.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4e4fd475fb3745332eec28ef818797001cc1bdd6c3f35420d5d41f4b719f264b.exe
Resource
win10v2004-20241007-en
General
-
Target
4e4fd475fb3745332eec28ef818797001cc1bdd6c3f35420d5d41f4b719f264b.exe
-
Size
208KB
-
MD5
dd0b1380eeb4d08b0a16b01fb2382b24
-
SHA1
598e15c6acf3db04d5075948ec7ec8a241317bfb
-
SHA256
4e4fd475fb3745332eec28ef818797001cc1bdd6c3f35420d5d41f4b719f264b
-
SHA512
fefa1bccdd17a1c4b72c903d45aa3aa3e8d16e0e66f9da232f9e3cc4a9b034a54ef6dd021a437762c46c4105c395bbba6920b82440307f6c03ea601ea9809608
-
SSDEEP
6144:iZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq56:gquCuygMQjd5vJIBP1p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e4fd475fb3745332eec28ef818797001cc1bdd6c3f35420d5d41f4b719f264b.exe
Files
-
4e4fd475fb3745332eec28ef818797001cc1bdd6c3f35420d5d41f4b719f264b.exe.exe windows:4 windows x86 arch:x86
520c130e82cbe6120da2d52c754c2522
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
SetEvent
FindResourceA
GetLogicalDriveStringsW
CreateThread
GetModuleHandleA
GetSystemTime
GetProcAddress
DisconnectNamedPipe
lstrlenA
CreateMutexW
GlobalGetAtomNameA
lstrcat
SetCalendarInfoW
CreateFileMappingA
SetComputerNameW
GetThreadPriority
IsBadReadPtr
GetNumberFormatA
EndUpdateResourceA
OpenFile
GetAtomNameW
GetCurrentThread
CreatePipe
GetUserDefaultLangID
GetFileType
GetFullPathNameA
RemoveDirectoryW
FatalAppExitA
lstrlenW
GlobalDeleteAtom
FindAtomW
GetModuleFileNameW
FileTimeToDosDateTime
BeginUpdateResourceW
GetEnvironmentVariableA
GetWindowsDirectoryW
lstrcatA
GetNamedPipeInfo
GetModuleHandleW
GetCalendarInfoA
GetLongPathNameA
GetEnvironmentStringsW
GetExpandedNameW
GetLogicalDrives
GetCurrentDirectoryA
lstrcpyA
GetStringTypeW
SearchPathA
lstrlen
EnumDateFormatsA
IsDebuggerPresent
GetProcessHeaps
SetThreadPriority
GetTempPathW
CreateMutexA
user32
GetIconInfo
CreateDialogParamA
GetSubMenu
GetClassInfoA
CreateAcceleratorTableW
ChildWindowFromPoint
GetScrollPos
GetSystemMetrics
LoadIconW
BringWindowToTop
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamA
CopyRect
GetWindowTextLengthA
GetSysColor
gdi32
CreateDCA
GetPolyFillMode
GetEnhMetaFileDescriptionW
SetWorldTransform
CreateMetaFileW
SetStretchBltMode
BeginPath
GetTextCharset
CreateColorSpaceA
SetViewportOrgEx
IntersectClipRect
Ellipse
GetMetaFileBitsEx
CreateMetaFileA
GetCharWidthW
PaintRgn
GetDeviceGammaRamp
CombineRgn
EnumICMProfilesW
PlayMetaFile
GetDCOrgEx
advapi32
RegOpenKeyA
RegDeleteValueW
RegOpenKeyA
RegCloseKey
shlwapi
StrFormatByteSizeA
PathCreateFromUrlA
SHRegSetPathW
opengl32
glReadBuffer
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.PwM Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.OwvyT Size: 3KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MTxF Size: 1KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XWRUxX Size: 1KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YCYo Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tKhtUt Size: 2KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ