Static task
static1
Behavioral task
behavioral1
Sample
159b062f6abd933a94b80233a39b1b0a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
159b062f6abd933a94b80233a39b1b0a.exe
Resource
win10v2004-20231215-en
General
-
Target
159b062f6abd933a94b80233a39b1b0a
-
Size
551KB
-
MD5
159b062f6abd933a94b80233a39b1b0a
-
SHA1
ff93365c5768ee4435fbbc5280baf35cea4060e8
-
SHA256
e64ea58cb3c9f0d998ee054c86b10073d8f64b572a561a4f48c977d3f74db0f9
-
SHA512
09fe5b39a1b844075e2e3c99d6e2d097ed06f293192a3bdb3b60edefbb69939af8238c54f9986be5f31ac60b03f3062b376ad2278a963a597b261efc4f7372ea
-
SSDEEP
12288:BS4kIViS8bdPP0s9GPPLwEUSX2LwFHy3C2wMaYEGGBnOw28q:fkO8bdPss9GPPLwERGLwFHy3/lGI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 159b062f6abd933a94b80233a39b1b0a
Files
-
159b062f6abd933a94b80233a39b1b0a.exe windows:4 windows x86 arch:x86
c8f7b83d62f6655426061884ffc021ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHGetSpecialFolderLocation
CommandLineToArgvW
ShellExecuteW
SHGetFileInfoW
SHBrowseForFolderW
SHGetMalloc
SHChangeNotify
ShellExecuteExW
SHGetPathFromIDListW
kernel32
CreateFileA
WaitForSingleObject
CreateProcessW
SetFileApisToOEM
SetPriorityClass
SetThreadPriority
GetLastError
GetCurrentProcess
GetCurrentDirectoryW
GetEnvironmentVariableW
GetCurrentThread
GetModuleFileNameW
GetShortPathNameW
LocalFree
GetCommandLineW
FindResourceW
GetModuleHandleW
CreateDirectoryW
DeleteFileW
RemoveDirectoryW
GetFileAttributesW
InterlockedIncrement
InterlockedDecrement
FindClose
FindFirstFileW
FindNextFileW
FileTimeToSystemTime
FreeLibrary
GetProcAddress
FormatMessageW
CloseHandle
ResumeThread
Sleep
GetCurrentThreadId
GetTempFileNameW
MoveFileW
CreateFileW
lstrlenW
GetTempPathW
SetFileAttributesW
GetFullPathNameW
SetFileTime
GetLongPathNameW
SetFilePointer
GetFileSize
ReadFile
WriteFile
GetDiskFreeSpaceExW
ExpandEnvironmentStringsW
GetDiskFreeSpaceW
GetVolumeInformationW
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
HeapReAlloc
VirtualAlloc
CreateEventW
GetConsoleMode
GetConsoleCP
LeaveCriticalSection
EnterCriticalSection
LCMapStringW
WideCharToMultiByte
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
WaitForMultipleObjects
SetEvent
ResetEvent
SetEndOfFile
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
user32
LoadStringW
GetDesktopWindow
IsDialogMessageW
ScreenToClient
PostQuitMessage
ShowWindow
KillTimer
IsWindowVisible
DispatchMessageW
TranslateMessage
CreateDialogParamW
SetTimer
DestroyIcon
SendMessageW
IsWindow
MessageBoxW
GetWindowRect
GetSystemMetrics
PostMessageW
DialogBoxParamW
SetWindowPos
GetWindowTextW
SetWindowTextW
GetDlgItem
EndDialog
EnableWindow
LoadIconW
GetMessageW
advapi32
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
ole32
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitialize
CoInitializeEx
Sections
.text Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ