Static task
static1
Behavioral task
behavioral1
Sample
17281dbf2a5fa71d8e89c90c4a52492890959c68dcc44f4ab7a591ae7e3f254f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17281dbf2a5fa71d8e89c90c4a52492890959c68dcc44f4ab7a591ae7e3f254f.exe
Resource
win10v2004-20231222-en
General
-
Target
17281dbf2a5fa71d8e89c90c4a52492890959c68dcc44f4ab7a591ae7e3f254f
-
Size
162KB
-
MD5
f6acd73b0b19d5b0b34dbbf7c407b8c1
-
SHA1
920a55d74cc431d97b6403cc8ae3b709c5757c2c
-
SHA256
17281dbf2a5fa71d8e89c90c4a52492890959c68dcc44f4ab7a591ae7e3f254f
-
SHA512
a9d961b8b0ac341f53b3f8a76b305d9a9137acdc33a293482102b40e93574e11c13d1afbf0152b0d6602d7a0dd057682ec4c9f63d5ed46ac724b5994eb8b0f71
-
SSDEEP
1536:06Qm1W+rlMwbmwpqperBVNPUv7vpY9ZtvG:HnE+rhqperHNsTR29G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17281dbf2a5fa71d8e89c90c4a52492890959c68dcc44f4ab7a591ae7e3f254f
Files
-
17281dbf2a5fa71d8e89c90c4a52492890959c68dcc44f4ab7a591ae7e3f254f.exe windows:4 windows x64 arch:x64
3c47cea04280a18bc1471a68231aa8cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
InitCommonControls
comdlg32
ChooseFontW
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateEllipticRgn
CreateFontIndirectW
CreatePen
DeleteDC
DeleteObject
Ellipse
GetStockObject
GetTextExtentPointW
LineTo
MoveToEx
OffsetRgn
OffsetWindowOrgEx
SelectObject
SetBkColor
SetBkMode
SetTextColor
SetViewportOrgEx
TextOutW
kernel32
GetCommandLineA
GetDateFormatW
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetTimeFormatW
shell32
ShellAboutW
ucrtbase
__p___argc
__p___argv
_configure_narrow_argv
_get_initial_narrow_environment
_initialize_narrow_environment
_set_app_type
cos
cosf
exit
sin
sinf
user32
BeginPaint
CheckMenuItem
CheckMenuRadioItem
CreateWindowExW
DefWindowProcW
DispatchMessageW
EnableMenuItem
EndPaint
FillRect
GetDC
GetMessageW
GetSubMenu
GetSysColor
GetSysColorBrush
GetWindowLongW
GetWindowRect
InvalidateRect
KillTimer
LoadCursorW
LoadIconW
LoadMenuW
LoadStringW
MapWindowPoints
MessageBoxW
PostQuitMessage
RegisterClassW
ReleaseDC
SetMenu
SetTimer
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowWindow
TranslateMessage
UpdateWindow
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 4KB - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 208B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 4KB - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 4KB - Virtual size: 249B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 4KB - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ