Static task
static1
Behavioral task
behavioral1
Sample
19115162fa9d68c748856478dfa8c74d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19115162fa9d68c748856478dfa8c74d.exe
Resource
win10v2004-20231215-en
General
-
Target
19115162fa9d68c748856478dfa8c74d
-
Size
279KB
-
MD5
19115162fa9d68c748856478dfa8c74d
-
SHA1
24eea93a203edffb8ea471659a7b8de3c8dbc673
-
SHA256
16e236e7866c7daa824a67f09d37b3a989682c817e8716c827c0003d366e89a3
-
SHA512
3f14c948faeb731b2c33e30d7d506450b71761d083290be4cca6ed6ec0909e7788a225943dcdd8358a270fec8437b115af4dc768baadbd7e829563e7d71efa23
-
SSDEEP
6144:jUwncKt7zW1pw2CytBmujY/gkEh7suBNKyly2z2Wq:jVc+Opw2ZTLjUE5s2Eyl9K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19115162fa9d68c748856478dfa8c74d
Files
-
19115162fa9d68c748856478dfa8c74d.exe windows:4 windows x86 arch:x86
bdfc647c27356f835ff6c3a679f28e15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
EndDeferWindowPos
ShowWindowAsync
GetWindow
GetWindowRect
CreateWindowExA
WindowFromPoint
IsChild
GetTopWindow
ArrangeIconicWindows
EnumThreadWindows
DialogBoxParamA
EndDialog
AdjustWindowRectEx
kernel32
GetStartupInfoA
VirtualAllocEx
OpenMutexA
LocalHandle
GetProcAddress
GetModuleHandleA
GetStringTypeW
IsValidCodePage
GlobalFlags
LeaveCriticalSection
HeapWalk
WideCharToMultiByte
ReleaseSemaphore
GetNumberFormatA
HeapValidate
GlobalLock
SetThreadLocale
HeapCreate
CreateMutexA
GetUserDefaultLCID
netapi32
NetWkstaSetInfo
NetAuditWrite
NetErrorLogWrite
NetErrorLogRead
NetFileClose
NetGroupAddUser
NetGetDCName
NetConfigSet
NetConfigGet
NetGetJoinableOUs
NetGroupAdd
NetConfigGetAll
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
fscanf
_fsopen
_flushall
fwrite
fread
fprintf
fputs
_XcptFilter
free
fputc
fsetpos
fopen
fseek
ftell
freopen
_fullpath
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 442KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ