Static task
static1
Behavioral task
behavioral1
Sample
0161052adf11dd4ba7f0c92e5e1fa61f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0161052adf11dd4ba7f0c92e5e1fa61f.exe
Resource
win10v2004-20231215-en
General
-
Target
0161052adf11dd4ba7f0c92e5e1fa61f
-
Size
158KB
-
MD5
0161052adf11dd4ba7f0c92e5e1fa61f
-
SHA1
2d32066d2361ee5ff3cf741221888b702ce92717
-
SHA256
45f2ee7e6ea63fbd7d0e48d369995f258d6437647139b41d4612460d8f352519
-
SHA512
cbf05a433c7fda8cc73d22a8b465509248252f41532e3ac1da05ffc3c1fad660cbc38e10644302a5a12dea247c7cd0df73a0b6f8ada4d8eecb6a473e7ce0d285
-
SSDEEP
3072:LIH9uSx6sUQmeFWx7hqzRuQMznmy2Vo5RMb8VKzGDv7tAvsHYIrNlddh4epQa:L+9uUQQGx7QEjzn3MKRMAVTT1NlbhfQa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0161052adf11dd4ba7f0c92e5e1fa61f
Files
-
0161052adf11dd4ba7f0c92e5e1fa61f.exe windows:5 windows x86 arch:x86
e0a8d6573da77979c8cf771fd8bb510a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryInfoKeyW
RegDeleteKeyA
RegLoadKeyA
RegQueryValueExW
RegEnumKeyExW
RegEnumKeyExA
RegReplaceKeyA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyA
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteValueW
RegCreateKeyExW
RegCreateKeyExA
RegOpenKeyExW
RegQueryValueA
RegCreateKeyW
RegCreateKeyExA
RegDeleteKeyW
RegQueryValueW
RegEnumValueW
RegLoadKeyA
RegQueryValueExA
RegEnumKeyA
RegCreateKeyA
RegLoadKeyW
RegDeleteValueW
RegEnumValueA
RegEnumKeyExA
RegReplaceKeyW
RegOpenKeyW
RegLoadKeyA
RegEnumKeyExA
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW
RegCreateKeyExA
RegEnumKeyA
RegCreateKeyW
RegGetKeySecurity
RegEnumKeyExW
RegOpenKeyA
RegDeleteValueW
RegReplaceKeyA
RegDeleteValueA
RegCreateKeyA
RegQueryValueA
RegCreateKeyW
RegOpenKeyA
RegEnumKeyA
RegEnumKeyW
RegEnumKeyExA
RegDeleteValueW
RegQueryValueW
RegReplaceKeyA
RegQueryInfoKeyA
RegEnumValueW
RegEnumKeyExW
RegReplaceKeyW
RegReplaceKeyW
RegCreateKeyExA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyW
RegQueryInfoKeyA
RegDeleteKeyW
RegFlushKey
RegCreateKeyExW
RegQueryValueW
RegQueryInfoKeyW
RegQueryValueExW
RegReplaceKeyA
RegEnumKeyExW
RegGetKeySecurity
RegEnumValueW
RegQueryValueA
RegOpenKeyA
RegEnumKeyExW
RegQueryValueW
RegOpenKeyW
RegDeleteKeyW
RegCreateKeyA
RegOpenKeyExW
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegReplaceKeyA
RegCreateKeyW
RegOpenKeyA
RegEnumKeyExA
RegQueryValueW
RegEnumKeyA
RegOpenKeyExW
RegGetKeySecurity
RegQueryValueExA
RegReplaceKeyW
RegEnumValueA
RegQueryValueA
RegFlushKey
RegReplaceKeyA
RegDeleteKeyA
kernel32
ReadFile
ExitProcess
CreateDirectoryA
GetPriorityClass
DeleteFileW
GetFileType
FindAtomW
GetCPInfo
AddAtomW
CopyFileA
GetCommandLineA
CopyFileExW
OpenFile
DeleteFileA
FindAtomA
FindClose
FatalExit
WriteFile
ExitThread
DeleteAtom
GetStdHandle
GetFileTime
CopyFileExA
GlobalFree
GetLastError
GetFileTime
OpenFileMappingA
ExitProcess
DeleteFileA
CopyFileA
ReadFile
DeleteAtom
GetCommandLineA
CopyFileExA
OpenFile
ExitProcess
FindAtomA
GetCommandLineA
GetLocalTime
GetStdHandle
CopyFileExA
FindClose
FindAtomW
GetCPInfo
FreeResource
GetPriorityClass
DeleteAtom
GlobalFree
WriteFile
OpenFileMappingA
CreateDirectoryA
ReadFile
OpenFile
GetFileType
GetCPInfo
AddAtomA
GetFileTime
DeleteFileW
GetStdHandle
FindAtomA
GetLastError
DeleteFileA
GetCommandLineA
FreeResource
GetFileType
GlobalFree
CreateDirectoryA
WriteFile
GetFileType
ExitThread
DeleteAtom
ReadFile
DeleteFileW
CopyFileA
FindAtomA
CopyFileExA
GetFileTime
GetCPInfo
FindClose
GlobalFree
ExitProcess
FindAtomW
AddAtomW
GetLocalTime
AddAtomA
GetFileType
GetFileTime
FlushFileBuffers
DeleteFileA
FreeResource
CopyFileExA
GetStdHandle
CopyFileExW
GetCommandLineA
FatalExit
CopyFileA
WriteFile
ExitProcess
GetFileType
GetPriorityClass
GetFileTime
FindAtomW
GetCommandLineA
GetLastError
ReadFile
CreateDirectoryA
DeleteFileA
GetCPInfo
CopyFileA
AddAtomA
WriteFile
GetLocalTime
CopyFileExW
CopyFileExA
FreeResource
user32
GetMenu
InsertMenuA
CreateIcon
CopyRect
DialogBoxParamW
CloseWindow
AppendMenuW
EndDialog
IsWindow
GetWindowTextLengthA
BeginPaint
DrawIcon
IsMenu
CalcMenuBar
LoadCursorA
DrawTextW
DrawTextA
GetDlgItem
LoadMenuA
BeginPaint
DialogBoxParamA
DrawIcon
IsMenu
CreateIcon
CopyImage
DrawTextA
DrawIconEx
CalcMenuBar
GetCursor
CopyRect
GetFocus
CopyIcon
GetWindowTextA
CloseWindow
IsWindow
GetMenu
DialogBoxParamW
EndDialog
LoadCursorA
GetDlgItem
BlockInput
CopyImage
InsertMenuA
DialogBoxParamA
DialogBoxParamW
DrawTextW
GetMenu
IsMenu
DrawIconEx
DrawIcon
CalcMenuBar
AppendMenuA
LoadMenuA
CloseWindow
GetWindowTextLengthA
CreateIcon
GetDC
AppendMenuA
GetCursor
GetMenu
AppendMenuW
CalcMenuBar
GetWindowTextLengthA
BlockInput
AlignRects
CreateIcon
DialogBoxParamA
BeginPaint
LoadCursorA
DrawTextW
DrawIconEx
GetFocus
EndDialog
Sections
.f2e87 Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.24984 Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5b08 Size: 107KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3gcb Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ