Static task
static1
Behavioral task
behavioral1
Sample
165206d32a3ab914da52df4153ca4440.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
165206d32a3ab914da52df4153ca4440.exe
Resource
win10v2004-20231215-en
General
-
Target
165206d32a3ab914da52df4153ca4440
-
Size
104KB
-
MD5
165206d32a3ab914da52df4153ca4440
-
SHA1
38f408df1a93f47607ec5e5d5e4ff81098fbe0f5
-
SHA256
e88f0e6fb57442d3dd7cec67dab48f42380f4305a8f0803a20b87b9173c8f477
-
SHA512
06c84bc527e5b34e808c947325297477ebf5c4bb3378a49101769ca47f4f7727a7520d0013ae9c003e91c53b057bdce8b8d31f9137b0b54d6186fc377395f0e4
-
SSDEEP
1536:tbUC218fcXW0vyN8Thw7XdqkTX4bCY/sKDDlo+pSUfaw0Q:tbUC0zXfm8T6TX4eYUKDDloISs0Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 165206d32a3ab914da52df4153ca4440
Files
-
165206d32a3ab914da52df4153ca4440.exe windows:4 windows x86 arch:x86
e688aa41be4596de907529171fd716dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
avifil32
AVIFileInit
AVIFileGetStream
AVIGetFromClipboard
AVIFileExit
AVIFileOpenA
CreateEditableStream
AVIStreamGetFrame
EditStreamSetNameA
AVIClearClipboard
AVIPutFileOnClipboard
AVIMakeFileFromStreams
EditStreamClone
EditStreamCut
EditStreamCopy
AVIStreamRelease
AVISaveVA
AVIBuildFilterA
AVISaveOptions
AVIFileRelease
AVISaveOptionsFree
AVIStreamGetFrameOpen
AVIStreamGetFrameClose
EditStreamPaste
AVIStreamStart
AVIStreamTimeToSample
AVIStreamLength
AVIStreamRead
AVIStreamSampleToTime
AVIStreamInfoA
EditStreamSetInfoA
AVIStreamReadFormat
msvfw32
DrawDibClose
DrawDibOpen
DrawDibRealize
GetOpenFileNamePreviewA
DrawDibDraw
ord2
winmm
timeGetTime
waveInStart
waveInStop
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveInUnprepareHeader
waveInReset
waveInClose
waveOutUnprepareHeader
waveOutClose
waveOutReset
waveOutPause
waveOutRestart
waveOutWrite
waveOutGetPosition
waveOutOpen
sndPlaySoundA
waveOutPrepareHeader
kernel32
GlobalFree
GlobalAlloc
GlobalReAlloc
GlobalSize
lstrcpyA
lstrlenA
CopyFileA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GetWindowsDirectoryA
ReadFile
CreateThread
CreateFileA
TerminateThread
WaitForSingleObject
CloseHandle
WriteFile
GlobalUnlock
GlobalLock
GetModuleFileNameA
Sleep
SetConsoleCtrlHandler
LocalFree
FormatMessageA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
GetProcAddress
LoadLibraryA
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
GetFileType
GlobalHandle
HeapCreate
HeapFree
GetLastError
LCMapStringA
MultiByteToWideChar
HeapAlloc
VirtualAlloc
LCMapStringW
VirtualFree
RtlUnwind
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
HeapDestroy
GetVersionExA
user32
SetDlgItemInt
DefDlgProcA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
wvsprintfA
KillTimer
SetTimer
LoadIconA
RegisterClassA
CreateWindowExA
ShowWindow
SetActiveWindow
SetWindowTextA
EnableMenuItem
ModifyMenuA
SetScrollRange
SetScrollPos
SetDlgItemTextA
GetDlgItemInt
EndPaint
LoadStringA
InflateRect
FrameRect
wsprintfA
GetSysColor
PeekMessageA
TranslateMessage
DispatchMessageA
InvalidateRect
LoadCursorA
SetCursor
PostMessageA
DefWindowProcA
GetAsyncKeyState
GetClipboardOwner
OpenClipboard
EmptyClipboard
CloseClipboard
PostQuitMessage
GetClientRect
GetDlgItemTextA
BeginPaint
CheckMenuItem
GetParent
CallWindowProcA
GetWindowTextA
DestroyWindow
GetWindowLongA
SetWindowLongA
SetFocus
TranslateAcceleratorA
SendMessageA
UpdateWindow
WaitMessage
MessageBeep
MessageBoxA
GetDC
ReleaseDC
GetScrollPos
LoadAcceleratorsA
gdi32
PatBlt
SelectObject
SetBkColor
DeleteObject
CreateSolidBrush
ExtTextOutA
GetStockObject
GetBkColor
TextOutA
ExcludeClipRect
comdlg32
GetSaveFileNameA
advapi32
DeleteService
CloseServiceHandle
RegisterEventSourceA
ReportEventA
DeregisterEventSource
SetServiceStatus
StartServiceCtrlDispatcherA
RegOpenKeyA
OpenServiceA
RegisterServiceCtrlHandlerA
ControlService
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
QueryServiceStatus
RegCloseKey
CreateServiceA
OpenSCManagerA
shell32
DragQueryFileA
DragFinish
DragAcceptFiles
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE