Static task
static1
Behavioral task
behavioral1
Sample
59163c2f24b2abd94c05f42897fd0155.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
59163c2f24b2abd94c05f42897fd0155.exe
Resource
win10v2004-20231215-en
General
-
Target
59163c2f24b2abd94c05f42897fd0155
-
Size
547KB
-
MD5
59163c2f24b2abd94c05f42897fd0155
-
SHA1
36c3017ce8b9443ac56398e4799772e4f8088d87
-
SHA256
e2e27a6ef9fd02bf7ab3cc12f8069b78c1930e2e7ab9db1660759cd38adb0a4c
-
SHA512
7d4d22067050ad509c33172880309c3feb3b9fff64685c1f0471847f44692c7dd22ab1d94b67ba97b2083ad850f5d04772557549a2b9ff58cfa976816cdc13e2
-
SSDEEP
12288:fKEV1B9VygOATOipnNECNRRtDyLS8X1s7deRVqZ:fKWBfygOAKipGC/RteLS8yp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59163c2f24b2abd94c05f42897fd0155
Files
-
59163c2f24b2abd94c05f42897fd0155.exe windows:4 windows x86 arch:x86
fb02e67263a21611e4cbac1ed8b3d4f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
mapi32
BMAPIAddress
BMAPIAddress
BMAPIDetails
BMAPIFindNext
BMAPIGetAddress
BMAPIGetReadMail
BMAPIReadMail
BMAPIResolveName
BMAPISaveMail
BMAPISendMail
BuildDisplayTable@40
CbOfEncoded@4
CchOfEncoding@4
ChangeIdleRoutine@28
CloseIMsgSession@4
CreateIProp@24
CreateTable@36
DeinitMapiUtil@0
DeregisterIdleRoutine@4
DllCanUnloadNow
DllGetClassObject
EnableIdleRoutine@8
EncodeID@12
FBadColumnSet@4
FBadEntryList@4
FBadProp@4
FBadPropTag@4
imm32
ImmGetContext
ImmLockClientImc
ImmIsIME
ImmInstallIMEW
ImmLockIMC
ImmLockIMCC
ImmLockImeDpi
ImmNotifyIME
ImmRegisterClient
ImmRegisterWordA
ImmRegisterWordW
ImmEnumInputContext
ImmEnumRegisterWordA
ImmEnumRegisterWordW
ImmCreateIMCC
ImmActivateLayout
ImmDisableIME
ImmGenerateMessage
ImmGetAppCompatFlags
ImmGetCandidateListA
ImmGetCandidateListCountA
ImmGetCandidateListCountW
ImmGetCandidateListW
ImmGetCandidateWindow
ImmGetCompositionFontA
ImmGetCompositionFontW
ImmGetCompositionStringA
ImmGetCompositionStringW
ImmGetCompositionWindow
ImmGetContext
ImmGetConversionListA
kernel32
GetLastError
CreateFileA
GetEnvironmentVariableA
GetACP
OutputDebugStringW
AttachConsole
SetThreadLocale
HeapSetInformation
CreateRemoteThread
QueryDosDeviceA
LZRead
gdi32
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
Sections
.text Size: 31KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 330KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ