Static task
static1
Behavioral task
behavioral1
Sample
06164b540b6392b3df1b5637c13a6615.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06164b540b6392b3df1b5637c13a6615.exe
Resource
win10v2004-20231215-en
General
-
Target
06164b540b6392b3df1b5637c13a6615
-
Size
106KB
-
MD5
06164b540b6392b3df1b5637c13a6615
-
SHA1
0d067bf9cae4114ab6bc2412dadb4650680eb0f2
-
SHA256
0682d46b99f2b32c613cab80fbbfa553c1e350cb072070989985f0587c6e4dc8
-
SHA512
c0c86033abbd0c00c208683c3b47ddc3e799826b77e63e96deeec16b7606ee408cf1e30fa369a2d0502a80d1ea46c30e5b4b7ff75c47aae434e39cd0c0dfb8bb
-
SSDEEP
1536:E4k07OD6wmMLqWpamVkTX8iovHycbMmPS2ira2IuTPTSz5:E+7OBgWFQX8iZKvnS7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06164b540b6392b3df1b5637c13a6615
Files
-
06164b540b6392b3df1b5637c13a6615.exe windows:4 windows x86 arch:x86
ef09cdd2c37ac8a2cc5e15b6e885cb00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RestoreDC
CancelDC
ClearBitmapAttributes
ExtTextOutA
CreateSolidBrush
BitBlt
GetBrushOrgEx
DeleteObject
DeleteDC
CloseMetaFile
AddFontMemResourceEx
GetPixel
GetBitmapBits
AddFontResourceA
AddFontMemResourceEx
GetCurrentPositionEx
DeleteDC
GetPixel
BitBlt
GetClipBox
ClearBitmapAttributes
SetTextColor
CancelDC
CloseMetaFile
AddFontResourceW
DeleteObject
GetClipBox
ClearBitmapAttributes
AddFontResourceExA
AddFontResourceA
GetCurrentPositionEx
AddFontMemResourceEx
BeginPath
CopyMetaFileA
DeleteDC
CreateSolidBrush
AddFontResourceExW
BitBlt
AddFontResourceTracking
ExtTextOutA
GetPixel
kernel32
CreateDirectoryA
CopyFileExA
ExitThread
GlobalFree
CopyFileW
GetComputerNameA
DeleteAtom
DeleteFileW
CreateProcessA
Sleep
DeleteFileA
CopyFileExW
GetFileSize
ReadFile
OpenFileMappingA
GetCommandLineA
GetStdHandle
advapi32
RegFlushKey
RegLoadKeyA
RegQueryValueExW
RegCreateKeyExA
RegReplaceKeyA
RegDeleteKeyW
RegLoadKeyW
RegEnumKeyW
RegEnumKeyExW
RegDeleteKeyA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegDeleteKeyA
RegOpenKeyW
RegCreateKeyW
RegQueryValueExA
RegEnumKeyExW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegEnumKeyExA
RegOpenKeyA
RegEnumValueA
RegDeleteValueA
user32
DrawIconEx
DrawTextW
LoadMenuA
GetMenu
GetDlgItem
IsMenu
CopyImage
DrawTextA
GetCursor
AppendMenuA
DialogBoxParamA
LoadMenuA
GetDlgItem
CreateIcon
EndDialog
AppendMenuA
LoadCursorA
AppendMenuW
GetWindowTextA
GetDC
BlockInput
DrawTextA
InsertMenuA
CloseWindow
CopyImage
IsWindow
GetDC
LoadCursorA
GetWindowTextA
AppendMenuA
DrawTextW
LoadMenuA
GetCursor
AppendMenuW
GetDlgItem
IsWindow
DrawTextA
GetFocus
InsertMenuA
comctl32
ImageList_Merge
ImageList_GetDragImage
ImageList_LoadImageW
ImageList_Copy
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx
ImageList_Create
ImageList_GetIconSize
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Replace
ImageList_DragLeave
ImageList_Read
ImageList_DrawIndirect
ImageList_AddMasked
ImageList_DragMove
ImageList_Merge
ImageList_GetDragImage
ImageList_AddIcon
ImageList_GetIcon
ImageList_GetImageCount
InitCommonControls
ImageList_GetImageRect
ImageList_EndDrag
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ