Static task
static1
Behavioral task
behavioral1
Sample
17aa01236d9ea520400c785d644b5d9a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17aa01236d9ea520400c785d644b5d9a.exe
Resource
win10v2004-20231215-en
General
-
Target
17aa01236d9ea520400c785d644b5d9a
-
Size
605KB
-
MD5
17aa01236d9ea520400c785d644b5d9a
-
SHA1
77948d4c751e88d84509678954d9d04004866e1f
-
SHA256
e2bdbd2a8a381029d1fcb6d07701e44daa8c694b6b0e8e7b6799a6f4dc5233e0
-
SHA512
86bfe288ba9317936530ed7fb78f1cd58766d372c31fefd7aec3b6f51fa9aa01a35ab829db4119321d8acb1c6db66bd36530cd572cdad354d84fdd2bedf407de
-
SSDEEP
12288:jm+YH81JM0NdmjyFnfJOxxSSWWFI104UE1sR:dYHSJDayFnfJoYKKXUb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17aa01236d9ea520400c785d644b5d9a
Files
-
17aa01236d9ea520400c785d644b5d9a.exe windows:5 windows x86 arch:x86
cc4f897d771487e980b5e2a9ad3ae75b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
DeleteDC
SetTextColor
SelectObject
SetBkColor
SetBkMode
CreateSolidBrush
kernel32
GetModuleHandleW
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
GetConsoleMode
RaiseException
GetCurrentThread
GetCommandLineA
HeapSize
GetCommandLineW
LockResource
GetCurrentProcessId
lstrlenW
VirtualQuery
GetEnvironmentStringsW
LCMapStringA
lstrlenA
UnmapViewOfFile
LCMapStringW
GetLastError
InterlockedIncrement
ExitProcess
GetFileType
CreateFileW
CreateEventW
FindFirstFileW
CreateFileMappingA
ResetEvent
CompareStringA
FindFirstFileA
WriteFile
GetProcAddress
GetWindowsDirectoryA
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
VirtualProtect
GetTickCount
QueryPerformanceCounter
SetEvent
EnterCriticalSection
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
GetVersion
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
IsValidCodePage
GetModuleHandleA
CreateMutexA
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
HeapAlloc
GetModuleFileNameW
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
FreeLibrary
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
SetStdHandle
LoadLibraryExW
CreateFileA
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
FindNextFileA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
TlsSetValue
TlsAlloc
GetEnvironmentVariableA
HeapFree
RtlUnwind
GetCPInfo
GetOEMCP
HeapCreate
FindResourceW
VirtualFree
Sleep
VirtualAlloc
CreateThread
advapi32
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
user32
SetCursor
SystemParametersInfoA
GetSysColor
MessageBeep
SetForegroundWindow
GetDesktopWindow
LoadCursorA
GetDlgItem
CreateWindowExA
GetSubMenu
CheckMenuItem
SetWindowLongA
SetCapture
GetWindowRect
GetSystemMetrics
KillTimer
BeginPaint
SetFocus
EndPaint
SetTimer
GetWindowLongA
RegisterClassA
IsIconic
GetWindow
IsWindowEnabled
TranslateMessage
SetWindowPos
ShowWindow
UpdateWindow
GetParent
DestroyWindow
GetClientRect
UnregisterClassA
GetDC
DispatchMessageA
MoveWindow
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 577KB - Virtual size: 577KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ