Static task
static1
Behavioral task
behavioral1
Sample
158b5c92c38d7933d5264b5fd2d2a83d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
158b5c92c38d7933d5264b5fd2d2a83d.exe
Resource
win10v2004-20231215-en
General
-
Target
158b5c92c38d7933d5264b5fd2d2a83d
-
Size
78KB
-
MD5
158b5c92c38d7933d5264b5fd2d2a83d
-
SHA1
4dcb5944ff4d8d3be822c98a77f92e043941e43d
-
SHA256
d3ae8cef984fa2b8dad2b566da020b7aaf2751255bb6b0833a2b99e7d9f538c2
-
SHA512
f9bff7fc967b718022a85b531f9c49334a8adcb6b7adda301ec83942de626e769f2ab93a7bacff75cd30df9d7e174d5129d3b9e69bf2fbbf719aa51558eb26b9
-
SSDEEP
1536:kLHk5SjT1qrBTTHA8mEYyEo6g2/TbULkYi45x+1IVXusi1s:oHYS+BvHANEpEo6g0/8kYB5xC+uh1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 158b5c92c38d7933d5264b5fd2d2a83d
Files
-
158b5c92c38d7933d5264b5fd2d2a83d.exe windows:4 windows x86 arch:x86
a7958f51786ad383ece853a3406c379f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
GetACP
GetCommandLineA
GetConsoleMode
GetCurrentProcess
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetThreadContext
GetVersionExA
GlobalLock
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
lstrcatA
user32
ScrollWindowEx
GetWindowRect
GetWindowLongA
GetUserObjectSecurity
GetMenuItemID
GetMenuItemCount
DrawMenuBar
DrawFrameControl
CreatePopupMenu
GetDesktopWindow
ole32
CoFileTimeNow
StringFromGUID2
CoBuildVersion
CoCreateInstance
advapi32
LsaQuerySecurityObject
GetMultipleTrusteeOperationW
shlwapi
PathRenameExtensionA
StrTrimA
SHRegGetPathA
StrToIntA
StrStrW
StrStrIA
StrStrA
PathFindFileNameA
shfolder
SHGetFolderPathA
Sections
.text Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ