Static task
static1
Behavioral task
behavioral1
Sample
106f766f645e9e61660f9a565a400b91.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
106f766f645e9e61660f9a565a400b91.exe
Resource
win10v2004-20231215-en
General
-
Target
106f766f645e9e61660f9a565a400b91
-
Size
231KB
-
MD5
106f766f645e9e61660f9a565a400b91
-
SHA1
c07375bf0b3d9f3f57c6b942d5ff14bb2cff5b45
-
SHA256
14ae7c77980752a655fca7359212fc57d3dcffa9c143da9342a4199e30ed9bd4
-
SHA512
7a44cd6dc7b19b09e642701f98c65c68d87f0d6301f0ea256ceab1e4b1bd85380014925acfacec3fcd6e52b004bd39c6de0520cb1f0eb2ab2199d3f579417964
-
SSDEEP
6144:XnyVuFFaRXuxLqhmprRFUCy7eix/KH17:XnyV40uVqhm5RFUC1x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 106f766f645e9e61660f9a565a400b91
Files
-
106f766f645e9e61660f9a565a400b91.exe windows:4 windows x86 arch:x86
e43fea0ad23b7fdf76bdb96485e5313a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableWindow
SetDlgItemTextA
GetDlgItem
SendMessageA
SetWindowTextW
EndDialog
DialogBoxParamW
DialogBoxParamA
SetWindowLongA
GetWindowLongA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetTimer
SendMessageW
LoadStringW
LoadStringA
CharPrevA
CharUpperW
CharUpperA
PostMessageA
CheckRadioButton
IsWindowEnabled
SetWindowTextA
IsDlgButtonChecked
ShowWindow
CheckDlgButton
MessageBoxW
MessageBoxA
wsprintfA
KillTimer
advapi32
RegDeleteValueW
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
oleaut32
SysAllocString
VariantClear
VariantCopy
SysStringByteLen
SysFreeString
shell32
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
comctl32
ord17
ole32
CoInitialize
CoUninitialize
comdlg32
GetOpenFileNameA
GetOpenFileNameW
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
_iob
memcpy
free
malloc
wcslen
memcmp
_purecall
memmove
_CxxThrowException
__CxxFrameHandler
_isatty
_fileno
kernel32
SetPriorityClass
GetDriveTypeA
FileTimeToDosDateTime
GetSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
OpenEventA
GetStdHandle
GetModuleHandleA
GlobalMemoryStatus
GetSystemInfo
GetModuleHandleW
FileTimeToSystemTime
CompareFileTime
GetProcAddress
GetCurrentProcess
GetProcessTimes
WriteFile
ReadFile
SetFilePointer
GetFileSize
CreateFileA
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
InitializeCriticalSection
GetStartupInfoA
lstrlenA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
GetTempFileNameW
GetTempFileNameA
GetTempPathW
GetTempPathA
SearchPathW
SetEndOfFile
lstrcatA
SearchPathA
GetCurrentDirectoryW
SetCurrentDirectoryW
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameW
DeleteFileW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
MoveFileW
RemoveDirectoryW
SetFileAttributesW
MoveFileA
RemoveDirectoryA
SetFileAttributesA
SetLastError
CreateFileW
SetFileTime
CloseHandle
GetWindowsDirectoryW
GetWindowsDirectoryA
FormatMessageW
FormatMessageA
LocalFree
GetModuleFileNameW
GetModuleFileNameA
AreFileApisANSI
LoadLibraryA
LoadLibraryExA
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
GetTickCount
Sleep
DeleteCriticalSection
GetCommandLineW
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetFullPathNameA
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oigmkvr Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE