Static task
static1
Behavioral task
behavioral1
Sample
15bf57f106c16f724ada9627eab189d1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15bf57f106c16f724ada9627eab189d1.exe
Resource
win10v2004-20231215-en
General
-
Target
15bf57f106c16f724ada9627eab189d1
-
Size
229KB
-
MD5
15bf57f106c16f724ada9627eab189d1
-
SHA1
634a8ce36ecf7448da298a286e3f360552c6d88e
-
SHA256
cb664eb80bcfc32181aee30b8ce1b66b5f326ee7454c8243c6fcfdbd3c09650d
-
SHA512
a7df6ce7e4f0a91f9768a780c3fbb48a3d32eddb64aa008da41b9b74dc75cfb9ce0a9f3205b638c2accad7e91f2de8d74326d51c1fba73bf8a4b9f64301b4f17
-
SSDEEP
3072:36W+naSeShCoJCAyseZRaVMgI5TFwast9S9apzzDGr0NMwYDDPYlB12tXM:36jZeShJNe3aVw5RV9a5JIPYS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15bf57f106c16f724ada9627eab189d1
Files
-
15bf57f106c16f724ada9627eab189d1.exe windows:4 windows x86 arch:x86
10ce76f7b9eed6f731270277b96ab13c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
DeleteCriticalSection
LCMapStringA
GetExitCodeProcess
RtlUnwind
GetTimeZoneInformation
GetCommandLineW
GetCurrentProcess
GetProcessHeap
VirtualAlloc
MultiByteToWideChar
IsValidCodePage
HeapReAlloc
GetLastError
GlobalFix
GetFileType
FreeLibrary
LeaveCriticalSection
GetModuleFileNameA
GetCPInfo
GetTimeFormatA
ExitProcess
GetDateFormatA
GetStringTypeW
HeapCreate
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
FreeEnvironmentStringsW
InitializeCriticalSection
QueryPerformanceCounter
TlsSetValue
SetLastError
SetCurrentDirectoryW
SetHandleCount
TlsFree
FreeEnvironmentStringsA
HeapAlloc
GetLocaleInfoW
HeapFree
lstrcatA
SetConsoleCtrlHandler
GetCurrentProcessId
GetPrivateProfileSectionA
GetUserDefaultLCID
GetStringTypeA
Sleep
HeapSize
EnumSystemLocalesA
GetEnvironmentStrings
GetVersionExA
GetACP
WideCharToMultiByte
SetUnhandledExceptionFilter
GetEnvironmentStringsA
CompareStringA
GetModuleHandleA
WriteFile
VirtualFree
IsBadReadPtr
GetPrivateProfileSectionW
SetEnvironmentVariableA
WriteConsoleOutputA
WriteProfileStringA
EnterCriticalSection
HeapDestroy
GetProcAddress
GetEnvironmentStringsW
GetLocaleInfoA
CompareStringW
IsValidLocale
InterlockedExchange
InterlockedDecrement
UnhandledExceptionFilter
GetOEMCP
VirtualQuery
TlsGetValue
TlsAlloc
GetConsoleCP
LCMapStringW
GetCurrentThreadId
InterlockedIncrement
GetStdHandle
TerminateProcess
GetCurrentThread
IsDebuggerPresent
OpenProcess
user32
CharLowerW
wvsprintfW
FillRect
SetCapture
TabbedTextOutW
DeferWindowPos
IsCharAlphaNumericA
InsertMenuA
DialogBoxParamW
IsDialogMessageA
DefDlgProcA
CharToOemA
wininet
FindFirstUrlCacheEntryW
FtpCreateDirectoryW
InternetSetOptionExW
GetUrlCacheEntryInfoA
InternetCreateUrlW
GopherOpenFileW
IsUrlCacheEntryExpiredW
FtpCreateDirectoryA
HttpQueryInfoW
InternetSetCookieW
InternetConnectA
RetrieveUrlCacheEntryFileA
InternetSetOptionW
InternetCanonicalizeUrlW
CreateUrlCacheGroup
SetUrlCacheConfigInfoA
InternetShowSecurityInfoByURL
InternetWriteFileExA
HttpEndRequestA
FindNextUrlCacheContainerA
InternetTimeFromSystemTime
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryExW
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ