Static task
static1
Behavioral task
behavioral1
Sample
7158931207c48d3960d430e032f8a66c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7158931207c48d3960d430e032f8a66c.exe
Resource
win10v2004-20231215-en
General
-
Target
7158931207c48d3960d430e032f8a66c
-
Size
176KB
-
MD5
7158931207c48d3960d430e032f8a66c
-
SHA1
17a883ccf958c0685778096c3eeff1786fb47af4
-
SHA256
e7fc82e4f5b2fe673f4beb2af9877a8bf176f716cd8aadf5df3c90c52261e8cf
-
SHA512
a20ec89786ec7970195b06706edf96d6523838969c3f82a5d4c1cda16eec6444fa22157a4b3fe1127cfae93ef6039018b5035e585eaa8ecab7f37d64f32426ec
-
SSDEEP
3072:tbqF8kZqzj2DD3OYBcPyckwCB4fgvTCTCxa+SJA4ChMJFiu:t++djcD35LCT4qGgJF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7158931207c48d3960d430e032f8a66c
Files
-
7158931207c48d3960d430e032f8a66c.exe windows:4 windows x86 arch:x86
16048858c950ba49b5c3c2f42f12413a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mciSendCommandA
sndPlaySoundA
ole32
CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
user32
FillRect
GetWindowLongA
IsWindow
GetSysColor
SetWindowLongA
SetCursor
ReleaseCapture
GetDlgItem
GetWindowInfo
GetDC
MoveWindow
LoadCursorA
ReleaseDC
SetWindowPos
SetCapture
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
lstrlenA
WriteFile
RaiseException
GetStdHandle
GetACP
MultiByteToWideChar
GetCalendarInfoW
InterlockedCompareExchange
CloseHandle
GetEnvironmentVariableA
GetCurrentProcessId
GetLocaleInfoA
CreateFileW
GetProcessHeap
HeapDestroy
HeapReAlloc
LoadLibraryExW
WideCharToMultiByte
GetCurrentThreadId
LoadLibraryW
EnumResourceNamesA
GetStartupInfoA
Sleep
GetSystemTime
HeapAlloc
GetCurrentProcess
GetThreadLocale
CreateProcessA
FindFirstFileW
LocalAlloc
SystemTimeToFileTime
HeapFree
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
TerminateProcess
GetModuleHandleA
lstrlenW
HeapSize
InterlockedExchange
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
lstrcpynW
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ