Static task
static1
Behavioral task
behavioral1
Sample
0a67167fbce5000cec53720f11c566c8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a67167fbce5000cec53720f11c566c8.exe
Resource
win10v2004-20231222-en
General
-
Target
0a67167fbce5000cec53720f11c566c8
-
Size
244KB
-
MD5
0a67167fbce5000cec53720f11c566c8
-
SHA1
e1e7fbcfb26536b017dc88dcd69d10031da54f53
-
SHA256
a21e2196f0180e2ca95771a89663ec2ddd17a18e2fedc588a97f675c0b7eb221
-
SHA512
18bd2bfebb2bc5fcbb434db9cd36570646923bd874e5f399144a8bfafa5b3fedcfc92b150be2da7d7530772e6f62a487698240b69db84ab9ade842f0702cde76
-
SSDEEP
6144:QTp5hbAsmTVpwekb3vVgWENnTNPz9KTPh8BR9G:QTpLbAs4ZkbfVgWcnBPzETyRG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a67167fbce5000cec53720f11c566c8
Files
-
0a67167fbce5000cec53720f11c566c8.exe windows:4 windows x86 arch:x86
5a079d42de9961b79a87f0e0440f4de0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDCOrgEx
GetRgnBox
CopyEnhMetaFileA
GetPixel
CreateBitmap
GetPaletteEntries
CreateDIBitmap
user32
EmptyClipboard
CharNextA
GetMenu
EnumChildWindows
GetKeyboardLayoutList
DrawFrameControl
SetForegroundWindow
SetWindowPlacement
DispatchMessageW
DispatchMessageA
GetClassNameA
IntersectRect
EnableScrollBar
SetCapture
CreatePopupMenu
SendMessageW
PeekMessageA
SetFocus
DrawIcon
CallNextHookEx
TrackPopupMenu
MoveWindow
GetScrollRange
ClientToScreen
SetActiveWindow
SetClassLongA
GetSystemMetrics
CreateIcon
MessageBoxA
EndPaint
GetClientRect
GetDC
GetMenuItemInfoA
GetSubMenu
SetWindowPos
GetMenuItemID
SetMenuItemInfoA
MapVirtualKeyA
GetClassLongA
SetWindowTextA
GetWindowDC
DrawTextA
GetCursor
LoadStringA
GetFocus
GetMessagePos
PostMessageA
SetWindowLongA
CharNextW
CharToOemA
DestroyWindow
DrawMenuBar
ChildWindowFromPoint
CallWindowProcA
GetKeyboardLayoutNameA
GetCursorPos
TranslateMDISysAccel
GetKeyboardType
GetClassInfoA
PostQuitMessage
SetWindowLongW
OemToCharA
DeleteMenu
DefMDIChildProcA
MsgWaitForMultipleObjects
SetClipboardData
KillTimer
CloseClipboard
GetWindowTextA
EnableWindow
RemovePropA
GetDCEx
LoadBitmapA
SendMessageA
ReleaseCapture
IsWindow
SetScrollPos
wsprintfA
GetWindowPlacement
WaitMessage
IsWindowVisible
SetParent
WindowFromPoint
DestroyMenu
PeekMessageW
UnregisterClassA
ScrollWindow
CharLowerBuffA
GetPropA
DrawAnimatedRects
InsertMenuA
GetWindowRect
DrawIconEx
GetWindow
MessageBeep
EnumThreadWindows
OpenClipboard
CheckMenuItem
GetKeyboardState
ShowScrollBar
SetScrollRange
IsIconic
GetMenuState
GetKeyNameTextA
BeginPaint
PtInRect
SystemParametersInfoA
AdjustWindowRectEx
SetPropA
TranslateMessage
ReleaseDC
GetScrollInfo
LoadKeyboardLayoutA
IsChild
ShowOwnedPopups
RegisterWindowMessageA
EnumWindows
SetTimer
GetSystemMenu
GetWindowThreadProcessId
GetWindowLongW
InvalidateRect
IsWindowUnicode
FrameRect
ShowWindow
FindWindowA
GetClipboardData
RegisterClassA
EnableMenuItem
GetMenuItemCount
GetKeyState
GetDesktopWindow
CreateMenu
RedrawWindow
GetTopWindow
DrawEdge
LoadIconA
GetActiveWindow
DefFrameProcA
SetCursor
UnhookWindowsHookEx
CharLowerA
IsRectEmpty
DefWindowProcA
DestroyIcon
InflateRect
UpdateWindow
GetSysColorBrush
GetScrollPos
ScreenToClient
CharUpperBuffA
EqualRect
IsZoomed
SetScrollInfo
DestroyCursor
RemoveMenu
CreateWindowExA
InsertMenuItemA
GetSysColor
GetCapture
GetDlgItem
GetForegroundWindow
IsDialogMessageA
OffsetRect
GetMenuStringA
GetKeyboardLayout
FillRect
IsDialogMessageW
SetMenu
SetRect
SetWindowsHookExA
IsWindowEnabled
LoadCursorA
shell32
SHGetFolderPathA
SHGetSpecialFolderLocation
SHGetFileInfoA
DragQueryFileA
SHGetDiskFreeSpaceA
kernel32
MulDiv
GetModuleHandleA
FreeResource
EnumCalendarInfoA
VirtualAllocEx
CreateEventA
GetSystemDefaultLangID
GetProcAddress
lstrlenW
GetACP
GetCommandLineW
lstrlenA
FormatMessageA
GetStdHandle
HeapFree
InitializeCriticalSection
ExitThread
WideCharToMultiByte
ExitProcess
GetVersionExA
GetCommandLineA
IsBadReadPtr
LocalFree
VirtualAlloc
LoadLibraryA
VirtualQuery
GetStartupInfoA
WriteFile
SetErrorMode
LockResource
VirtualFree
GetModuleFileNameA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
Sections
CODE Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc4 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc7 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ