Static task
static1
Behavioral task
behavioral1
Sample
03164c438f1942b8a8f3c5b4f44ac145.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03164c438f1942b8a8f3c5b4f44ac145.exe
Resource
win10v2004-20231222-en
General
-
Target
03164c438f1942b8a8f3c5b4f44ac145
-
Size
28KB
-
MD5
03164c438f1942b8a8f3c5b4f44ac145
-
SHA1
50fffe45264bd3afc388e65212b574952ca33dc1
-
SHA256
a0b81358b4116c3e559c1d96842f1f568b2115281880c8a8999b82dc732a226d
-
SHA512
54475a6a2aa3e8918b649352590568c3fea213a96079dbf1fbe813fd174145a6c72ed88049af34e86f66f01d3e129ed41fa40a04cdb37a9409764da09d30d284
-
SSDEEP
384:6Ma7ye+c1TAy9epy4hJoOl1zvR96ujq294ta2V8S:DeQoeNOOl1d9TzOtf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03164c438f1942b8a8f3c5b4f44ac145
Files
-
03164c438f1942b8a8f3c5b4f44ac145.exe windows:4 windows x86 arch:x86
b9430962b5be46443b36b692fa1a1e94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
CreateFileA
GlobalAlloc
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalFree
CloseHandle
ReadFile
GetModuleHandleA
InitializeCriticalSection
ExitProcess
lstrcpynA
LeaveCriticalSection
lstrcmpiA
GetSystemTime
SystemTimeToFileTime
GetModuleFileNameA
GetPrivateProfileStringA
user32
CharPrevA
SendMessageA
PostQuitMessage
DestroyWindow
DispatchMessageA
GetMessageA
CreateWindowExA
MessageBoxA
RegisterClassA
SetTimer
DefWindowProcA
FindWindowA
SetForegroundWindow
TrackPopupMenu
DestroyMenu
LoadImageA
wsprintfA
InsertMenuItemA
GetCursorPos
CreatePopupMenu
advapi32
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyA
RegCloseKey
shell32
ShellExecuteA
Shell_NotifyIconA
ole32
CoCreateGuid
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ