Static task
static1
Behavioral task
behavioral1
Sample
13f0c0838f774ab7816755fd55ad8ae6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13f0c0838f774ab7816755fd55ad8ae6.exe
Resource
win10v2004-20231215-en
General
-
Target
13f0c0838f774ab7816755fd55ad8ae6
-
Size
851KB
-
MD5
13f0c0838f774ab7816755fd55ad8ae6
-
SHA1
f438ab8dad5b1f96f07cfd05adc99b191d461ce9
-
SHA256
04f4cc830b9d01078abe1f055dddf0328ee47735829f2b2f35539947bd33cca5
-
SHA512
4cbc099c6b62329180c139e6e8bf1d21f54a71de2e08fbfd5123c7abaacc538df3cd138df9a044bc7f41c9ca861e924c483753b9bd9cf21b6cceed962ed053f2
-
SSDEEP
24576:ZlpbVQzcpP/v3vsCxdBmutuJXyFhAd7Dg29Zs:tbiqPvsa2degBy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13f0c0838f774ab7816755fd55ad8ae6
Files
-
13f0c0838f774ab7816755fd55ad8ae6.exe windows:5 windows x86 arch:x86
5d9c60e9cf32dab565bdbedaa17b121c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuBarInfo
DdeGetLastError
AdjustWindowRect
ClientToScreen
SetUserObjectInformationW
ReplyMessage
wvsprintfW
CharPrevExA
MapDialogRect
QuerySendMessage
FindWindowExA
CreateMDIWindowW
LoadAcceleratorsW
ScrollDC
AttachThreadInput
IsCharLowerA
GetActiveWindow
SetMenuDefaultItem
SetMenuItemInfoA
CreateIconFromResourceEx
SetMenuContextHelpId
DialogBoxParamW
FlashWindow
FindWindowA
GetCursor
SetScrollInfo
InvertRect
SetThreadDesktop
RemoveMenu
SetRectEmpty
EnumPropsW
SetSysColors
SetUserObjectSecurity
GetInputDesktop
SetProcessDefaultLayout
PostMessageW
NotifyWinEvent
LoadCursorFromFileA
GetParent
EnumDisplaySettingsExW
DdeAccessData
kernel32
InterlockedPushEntrySList
GetPrivateProfileIntA
EnumLanguageGroupLocalesW
DosDateTimeToFileTime
GetFileInformationByHandle
LZCreateFileW
SetCriticalSectionSpinCount
LZCloseFile
GetFullPathNameW
FindFirstFileExW
WaitForSingleObject
GetNumberOfConsoleFonts
GlobalMemoryStatus
SetThreadUILanguage
DeleteFileA
CreateDirectoryA
GetProfileIntA
SetDefaultCommConfigA
SetConsoleNlsMode
CancelWaitableTimer
SetVolumeLabelW
GetFirmwareEnvironmentVariableA
SetCurrentDirectoryW
SystemTimeToTzSpecificLocalTime
LocalFileTimeToFileTime
SetCommState
GetDriveTypeA
GlobalHandle
GlobalLock
IsBadReadPtr
GetEnvironmentStringsW
DeleteCriticalSection
RemoveVectoredExceptionHandler
GetPrivateProfileSectionNamesW
GetLocaleInfoA
HeapCreate
GetConsoleAliasesA
FormatMessageA
GetConsoleAliasExesLengthA
GetConsoleCharType
RtlFillMemory
LoadLibraryA
GetProfileIntW
VirtualAlloc
FreeLibraryAndExitThread
msi
MsiConfigureProductExA
MsiEnumProductsA
MsiApplyPatchW
MsiOpenPackageExW
MsiEnumComponentCostsA
MsiProvideAssemblyW
MsiAdvertiseProductExW
MsiOpenProductA
MsiSourceListForceResolutionW
MsiDecomposeDescriptorW
MsiRecordDataSize
MsiUseFeatureA
MsiSummaryInfoPersist
MsiGetFeatureUsageA
MsiEnumFeaturesW
MsiEnableLogW
MsiGetMode
MsiGetProductCodeA
MsiCreateAndVerifyInstallerDirectory
MsiPreviewDialogA
MsiGetTargetPathW
MsiEnumComponentCostsW
MsiDatabaseGetPrimaryKeysW
MsiGetProductPropertyA
usp10
ScriptBreak
UspFreeMem
ScriptPlace
ScriptGetFontProperties
ScriptStringOut
UspAllocTemp
ScriptCacheGetHeight
ScriptStringGetOrder
UspAllocCache
ScriptApplyLogicalWidth
ScriptString_pLogAttr
ScriptIsComplex
ScriptGetProperties
ScriptStringAnalyse
ScriptGetCMap
ScriptCPtoX
ScriptLayout
ScriptRecordDigitSubstitution
Sections
.text Size: 734KB - Virtual size: 734KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ