?BinaryRedirectNetDYuyhDBH@@YGKGE[D
Static task
static1
Behavioral task
behavioral1
Sample
0162883ad4dcc48b2580d529396eceea.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0162883ad4dcc48b2580d529396eceea.exe
Resource
win10v2004-20231215-en
General
-
Target
0162883ad4dcc48b2580d529396eceea
-
Size
146KB
-
MD5
0162883ad4dcc48b2580d529396eceea
-
SHA1
027b38cde473f3c5b12a9d85dfa48d6abe85e4ff
-
SHA256
41f51964b8687a74ee05408e4f9659e323a5e70766d94850e79bddd6ace64b92
-
SHA512
fa4233cc39bababe3af0783afe6f930a1fd8200e771d9541c9c5121f177cdb1e2bdf62bd661c90c4c02186617627c4c2fcb5e3a43eb71f04beb5ca3d01661483
-
SSDEEP
3072:2h/REuISa8DUd41UKZO0AwsaHAFjRN/TVS69Mf9GFVqH:2h/ROGU0UKZgwzHGdFTVS6aVyG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0162883ad4dcc48b2580d529396eceea
Files
-
0162883ad4dcc48b2580d529396eceea.exe windows:5 windows x86 arch:x86
001714f0fe417d593b7d6f3b65797382
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
calloc
wcstok
fwrite
setlocale
printf
toupper
strcoll
clock
system
fprintf
towlower
_controlfp
putc
qsort
__set_app_type
__p__fmode
wcscat
__p__commode
_amsg_exit
atol
realloc
strpbrk
_initterm
ungetc
fgets
_ismbblead
malloc
puts
floor
wcstoul
_XcptFilter
srand
strerror
wcslen
_exit
_cexit
strncpy
swscanf
sprintf
strspn
strcpy
towupper
bsearch
__setusermatherr
fclose
getenv
__getmainargs
kernel32
ReleaseMutex
GetTickCount
HeapFree
DeviceIoControl
ReleaseSemaphore
FindFirstFileW
AddAtomW
WaitForMultipleObjects
LockFile
HeapReAlloc
AddAtomA
HeapAlloc
FindResourceW
CreateDirectoryA
GetWindowsDirectoryA
IsValidLocale
GetCurrentDirectoryW
lstrcmpiA
InitializeCriticalSection
MoveFileExW
SetThreadAffinityMask
SetHandleCount
GetProcessHeap
ResetEvent
GetTempFileNameW
CompareFileTime
IsDBCSLeadByte
GetSystemWindowsDirectoryA
FreeLibrary
GetModuleHandleW
GetCommandLineA
SetThreadLocale
GetCommState
GetModuleHandleA
lstrcpyA
GetDateFormatA
GetVersionExW
DeleteFileA
CreateEventA
SetCommState
CreateMailslotW
GetSystemTimeAsFileTime
GetProcAddress
GetModuleFileNameA
SetHandleInformation
FindCloseChangeNotification
IsBadWritePtr
SetWaitableTimer
GlobalSize
HeapValidate
GlobalHandle
CreateSemaphoreA
GetWindowsDirectoryW
GetStartupInfoA
GetTempFileNameA
GetTimeFormatA
GetCommConfig
DuplicateHandle
lstrlenW
user32
GetWindowLongA
ActivateKeyboardLayout
ExitWindowsEx
CheckMenuRadioItem
GetClassInfoA
UnionRect
SetCaretPos
CreateDialogParamW
SendDlgItemMessageA
LockWindowUpdate
GetDlgItemInt
GetWindow
LoadImageW
GetSystemMetrics
ClipCursor
DialogBoxIndirectParamW
CheckRadioButton
PostMessageW
CreateDialogIndirectParamW
SetSysColors
IsIconic
CreateMenu
GetAsyncKeyState
OpenIcon
RemovePropW
SetDlgItemInt
SetTimer
SetClassLongW
DrawEdge
SetScrollRange
MessageBoxW
CharNextExA
TranslateAcceleratorA
PeekMessageA
IsWindow
DefDlgProcA
GetDC
GetKeyNameTextW
SendMessageA
ShowScrollBar
TrackPopupMenu
keybd_event
OemToCharBuffA
KillTimer
CreateIconIndirect
TileWindows
GetMenuItemRect
LoadImageA
CreateWindowExW
PostThreadMessageA
LoadMenuA
InvalidateRect
SendMessageTimeoutA
mouse_event
DialogBoxIndirectParamA
EnableMenuItem
DrawTextA
IsDialogMessageW
SetScrollInfo
SetWindowLongW
CreatePopupMenu
RegisterClassA
MapVirtualKeyW
CharUpperBuffA
FindWindowExA
RegisterClassExA
IsDlgButtonChecked
CharUpperA
GetMenuItemID
CharNextW
ValidateRect
DragObject
GetWindowLongW
SendMessageTimeoutW
IsRectEmpty
ArrangeIconicWindows
CloseDesktop
DrawAnimatedRects
GetLastActivePopup
SetWindowTextW
SetWindowPos
MoveWindow
SetRectEmpty
DrawMenuBar
SendInput
GetDialogBaseUnits
OpenInputDesktop
CharLowerA
IsWindowUnicode
GetForegroundWindow
SetCursor
SetFocus
GetAltTabInfoA
GetDlgItemTextA
SetCursorPos
ChangeMenuW
ShowCursor
SetDlgItemTextW
DefDlgProcW
RegisterClassExW
SetWindowTextA
GetMessageTime
wsprintfW
InternalGetWindowText
FindWindowExW
LoadAcceleratorsA
LoadCursorA
DrawTextW
LookupIconIdFromDirectory
FrameRect
ShowWindow
LoadMenuW
GetWindowTextA
IsZoomed
GetMenu
SetMenuDefaultItem
ClientToScreen
EqualRect
LoadCursorW
SendMessageW
UpdateWindow
comdlg32
PrintDlgExW
ChooseColorW
PrintDlgW
GetSaveFileNameW
PageSetupDlgW
shlwapi
UrlIsA
Exports
Exports
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ