Static task
static1
Behavioral task
behavioral1
Sample
f54165d4e290eb09f8287ae55f27bf40.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f54165d4e290eb09f8287ae55f27bf40.exe
Resource
win10v2004-20231215-en
General
-
Target
f54165d4e290eb09f8287ae55f27bf40
-
Size
364KB
-
MD5
f54165d4e290eb09f8287ae55f27bf40
-
SHA1
70f7af6afdc3233282d69ec7373ce5bb5a092a59
-
SHA256
989e3c1c590da6473dfb35a56616930d290fd4cd4625162762b1152c8ed0ef6d
-
SHA512
af3e40c3a923a909f66f3b9f2f8e02687611d2178bceec675b9699fec26546f235cf604a91dfd5ab8c04f5be191c3941cb3209862029ef16d9fb7d1bac587229
-
SSDEEP
6144:1Vh6SSiZnnDmukjGZdc1MXhCtyPCuWnw74gE:HhvZRkSzauWw7/E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f54165d4e290eb09f8287ae55f27bf40
Files
-
f54165d4e290eb09f8287ae55f27bf40.exe windows:4 windows x86 arch:x86
d92d8793f998eb13e35459675c86f0d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadPriority
GetCurrentThread
SetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
_llseek
GlobalLock
RtlMoveMemory
FindResourceA
LoadResource
LockResource
GlobalUnlock
Sleep
OpenFile
_lread
_lclose
GlobalAlloc
GetWindowsDirectoryA
HeapReAlloc
SetFilePointer
SetStdHandle
CloseHandle
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
GetLocaleInfoA
LoadLibraryA
VirtualAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcAddress
InterlockedIncrement
InterlockedDecrement
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetLastError
TlsGetValue
SetLastError
GetLocalTime
TlsAlloc
TlsSetValue
lstrcatA
DeleteCriticalSection
GetFileType
GetStdHandle
WaitForSingleObjectEx
GlobalFree
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
InterlockedExchange
RtlZeroMemory
lstrcmpiA
CreateThread
lstrlenA
GetCurrentThreadId
lstrcpyA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetCommandLineA
GetVersion
ExitProcess
user32
ClientToScreen
ShowCursor
GetWindowRect
DialogBoxParamA
RegisterClassA
DefDlgProcA
LoadIconA
LoadCursorA
SetForegroundWindow
FindWindowA
LoadStringA
GetSystemMetrics
UnhookWindowsHookEx
EndDialog
InvalidateRect
UpdateWindow
GetDlgItem
PostMessageA
SetWindowsHookExA
ShowWindow
SetWindowTextA
CharNextA
FillRect
GetClientRect
MoveWindow
GetDesktopWindow
IntersectRect
DefWindowProcA
SendMessageA
OffsetRect
DestroyWindow
BeginPaint
GetSystemMenu
EnableMenuItem
DrawTextA
EndPaint
SystemParametersInfoA
GetDC
ReleaseDC
SetRect
CallNextHookEx
SetClassLongA
PtInRect
RegisterClassExA
CreateWindowExA
SetWindowPos
EnableWindow
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
SetFocus
GetCursorPos
ScreenToClient
gdi32
DeleteObject
SetDIBitsToDevice
StretchDIBits
CreateCompatibleDC
GetStockObject
GetTextExtentPoint32A
TextOutA
CreateFontIndirectA
GetObjectA
SelectObject
SetBkMode
GetDeviceCaps
SetTextColor
RealizePalette
SelectPalette
CreatePalette
UpdateColors
SetBkColor
StretchBlt
BitBlt
CombineRgn
CreateRectRgnIndirect
CreateDIBitmap
DeleteDC
GetRegionData
advapi32
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
ShellExecuteExA
winmm
ord2
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ