Static task
static1
Behavioral task
behavioral1
Sample
018345c79864c6b2146d72ac95e66c01.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
018345c79864c6b2146d72ac95e66c01.exe
Resource
win10v2004-20231215-en
General
-
Target
018345c79864c6b2146d72ac95e66c01
-
Size
589KB
-
MD5
018345c79864c6b2146d72ac95e66c01
-
SHA1
e2fa29a762ccfde7eca39870c2731d587d8b523f
-
SHA256
64adb72f85970e7fe9aaf2716b46bba349d440ecd7458338066ad06b66295e2b
-
SHA512
0c7a4d03bbef657a4b8635f705b7c56911b9c8a2aa21618ba0ce1a7e0903773c44d8d453bd44a7cf19335c7a7051b88d0c548f96444067e6efb72f00751a365d
-
SSDEEP
12288:weti5CfAxHyJD13KLihlq1iF1SR+HsG/+7/9JtoGNFE:xC0AxeD4LihlHSR+H8JCkO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 018345c79864c6b2146d72ac95e66c01
Files
-
018345c79864c6b2146d72ac95e66c01.exe windows:4 windows x86 arch:x86
b8e7737d3061588d39dea013eef46d99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetTopWindow
TabbedTextOutW
GetQueueStatus
RegisterClipboardFormatW
BringWindowToTop
RegisterClassA
ShowWindow
GetOpenClipboardWindow
CopyIcon
GetSysColorBrush
GetProcessDefaultLayout
GetClipboardFormatNameW
IsCharAlphaNumericW
DlgDirListComboBoxW
RegisterClassExA
GetIconInfo
TranslateAcceleratorA
UnpackDDElParam
wininet
FindFirstUrlCacheContainerA
InternetDialA
FtpPutFileA
FindNextUrlCacheGroup
InternetGetLastResponseInfoW
shell32
DragQueryPoint
ExtractIconExA
kernel32
GlobalFlags
InterlockedIncrement
CreateMailslotA
OpenFile
HeapSize
GetCurrentProcess
GetTimeFormatA
GetEnvironmentStringsW
GetCurrentThreadId
VirtualQuery
GetTempFileNameW
InterlockedDecrement
CreateMutexA
IsValidCodePage
GetStringTypeA
FormatMessageW
GetConsoleCP
LeaveCriticalSection
GetModuleFileNameW
HeapFree
GetTimeZoneInformation
WriteFile
SetLastError
GlobalReAlloc
VirtualAlloc
GetDateFormatA
GetStartupInfoW
GetSystemTimeAsFileTime
TlsFree
GetCurrentDirectoryA
SetConsoleCtrlHandler
GetStringTypeW
CompareStringW
GetNamedPipeInfo
CreateFileA
GetACP
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
WritePrivateProfileSectionA
HeapReAlloc
LCMapStringW
IsValidLocale
FileTimeToSystemTime
SetFilePointer
GetCurrentThread
QueryPerformanceCounter
HeapAlloc
CompareStringA
GetCurrentProcessId
SetComputerNameA
IsDebuggerPresent
VirtualFree
SetUnhandledExceptionFilter
FreeLibrary
WriteConsoleOutputA
GetProcAddress
SetHandleCount
FindNextChangeNotification
GetStartupInfoA
WaitForMultipleObjectsEx
GetConsoleOutputCP
Sleep
MultiByteToWideChar
LCMapStringA
UnhandledExceptionFilter
GetLastError
ReadFile
TerminateProcess
WideCharToMultiByte
OpenMutexA
GetCommandLineW
TlsAlloc
FlushFileBuffers
GetCommandLineA
GetModuleHandleA
RtlUnwind
GetTickCount
GetWindowsDirectoryW
EnumSystemLocalesA
GetLocaleInfoA
WriteConsoleW
GetCPInfo
GetOEMCP
WaitForDebugEvent
SetEnvironmentVariableA
WriteConsoleA
TlsGetValue
DeleteCriticalSection
GlobalAlloc
GetConsoleMode
HeapDestroy
GetModuleHandleW
HeapCreate
TlsSetValue
FreeEnvironmentStringsW
RemoveDirectoryA
EnterCriticalSection
GetModuleFileNameA
lstrcmpi
VirtualFreeEx
GetFileType
GetLocaleInfoW
InterlockedExchange
GetStdHandle
SetStdHandle
CloseHandle
ExitProcess
LoadLibraryA
GetFileSize
comctl32
InitCommonControlsEx
gdi32
GetArcDirection
SetDIBits
GetBkMode
GetRasterizerCaps
GetWorldTransform
GetCharABCWidthsA
ExtCreatePen
GetViewportExtEx
GetClipRgn
StrokeAndFillPath
ColorMatchToTarget
PolyTextOutW
comdlg32
ChooseColorW
Sections
.text Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ