Static task
static1
Behavioral task
behavioral1
Sample
f7b16dcac696e4e8f59140e62c56df8d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f7b16dcac696e4e8f59140e62c56df8d.exe
Resource
win10v2004-20231215-en
General
-
Target
f7b16dcac696e4e8f59140e62c56df8d
-
Size
64KB
-
MD5
f7b16dcac696e4e8f59140e62c56df8d
-
SHA1
e250c7c0726d607844d24c0e5ad6c8ae490b4baa
-
SHA256
791f0820af21168f7c0355598503a4686870e2fb3ac6f6d6e1af057b3a593e82
-
SHA512
606f2ced35a5e77b0c9b0efbdb143362182f326ba6b264782aba342c775396c8f99ced64178750fb770ae1ed91fdc41abac78382c359370d46fd4aef599987a0
-
SSDEEP
1536:iv5O++Id+LIAYnJdTtAH6MKdcxpsnrDeosNi:5A+L6fGH6MVsrSos
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7b16dcac696e4e8f59140e62c56df8d
Files
-
f7b16dcac696e4e8f59140e62c56df8d.exe windows:4 windows x86 arch:x86
eec7a214148ea18d1d7fa3d88be145ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
GetBitmapBits
GetDCOrgEx
CloseMetaFile
AddFontResourceTracking
ClearBitmapAttributes
CopyMetaFileA
GetClipBox
BeginPath
CreateSolidBrush
SetTextColor
CancelDC
RestoreDC
GetBrushOrgEx
AddFontResourceExW
AddFontResourceW
AddFontMemResourceEx
ClearBrushAttributes
user32
LoadMenuA
IsMenu
InsertMenuA
BlockInput
AppendMenuA
GetDlgItem
GetWindowTextLengthA
AlignRects
GetDC
IsWindow
CopyIcon
GetWindowTextA
EndDialog
CopyImage
AppendMenuW
CloseWindow
CreateIcon
DrawIcon
LoadCursorA
DrawIconEx
EndDialog
CloseWindow
DrawIcon
InsertMenuA
LoadCursorA
AlignRects
GetCursor
IsWindow
IsMenu
GetWindowTextA
DialogBoxParamW
CopyIcon
GetWindowTextLengthA
CreateIcon
AppendMenuA
IsWindow
EndDialog
CopyImage
GetMenu
IsMenu
InsertMenuA
AlignRects
LoadCursorA
GetDC
CreateIcon
CopyRect
GetDlgItem
GetCursor
CloseWindow
LoadMenuA
BlockInput
DrawTextW
DialogBoxParamW
DrawIconEx
GetWindowTextA
GetFocus
advapi32
RegCreateKeyW
RegEnumValueA
RegQueryValueW
RegOpenKeyExA
RegDeleteValueA
RegLoadKeyW
RegQueryValueExW
RegDeleteKeyA
RegOpenKeyW
RegEnumKeyExA
RegGetKeySecurity
RegReplaceKeyA
RegEnumKeyA
RegDeleteKeyW
RegQueryInfoKeyA
RegFlushKey
RegOpenKeyExW
RegOpenKeyA
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumKeyW
RegEnumValueW
RegLoadKeyA
RegReplaceKeyW
RegFlushKey
RegOpenKeyExA
RegDeleteKeyW
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegEnumValueA
RegQueryValueW
RegDeleteValueA
RegCreateKeyExW
RegOpenKeyExW
RegCreateKeyW
RegEnumKeyW
RegQueryInfoKeyA
RegEnumKeyExA
RegLoadKeyA
RegEnumValueW
RegQueryValueExW
RegEnumKeyW
RegReplaceKeyA
RegCreateKeyExA
RegQueryValueExA
RegReplaceKeyW
RegEnumKeyA
RegLoadKeyA
RegQueryValueW
RegDeleteKeyA
RegEnumValueW
RegQueryInfoKeyA
RegGetKeySecurity
RegCreateKeyW
RegQueryInfoKeyW
RegLoadKeyW
RegDeleteValueW
RegOpenKeyA
RegQueryValueA
RegDeleteKeyW
RegOpenKeyExA
RegDeleteValueA
RegEnumKeyExW
comctl32
ImageList_BeginDrag
InitCommonControls
ImageList_GetImageRect
ImageList_Copy
ImageList_GetIconSize
ImageList_DrawEx
ImageList_AddMasked
ImageList_Create
ImageList_DragShowNolock
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_GetImageCount
ImageList_Remove
ImageList_Draw
ImageList_AddIcon
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_Merge
ImageList_EndDrag
kernel32
SetLastError
FindAtomA
ReadFile
ReadConsoleA
GetStdHandle
GlobalFree
GetConsoleMode
DeleteFileW
GetCommandLineA
CreateDirectoryA
OpenFile
DeleteAtom
CopyFileA
GetFileSize
CreateThread
GetFileTime
GetComputerNameA
GetCPInfo
WriteFile
CreateProcessA
FindFirstFileA
OpenFileMappingA
GetFileSize
ReadFile
CreateThread
Sleep
ReadConsoleA
DeleteFileA
CopyFileExA
GetCommandLineA
CopyFileW
GetCPInfo
CreateDirectoryA
GetFileTime
OpenFile
GetStdHandle
FindAtomA
ExitThread
DeleteFileW
DeleteAtom
OpenFileMappingA
CopyFileA
CreateProcessA
DeleteFileW
CreateDirectoryA
GetStdHandle
FindFirstFileA
ReadConsoleA
WriteFile
SetLastError
ExitThread
CopyFileExW
CreateThread
CopyFileW
OpenFile
GetFileSize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 475B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ