Static task
static1
Behavioral task
behavioral1
Sample
017d8284e144eba490d152da2ed0c547.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
017d8284e144eba490d152da2ed0c547.exe
Resource
win10v2004-20231215-en
General
-
Target
017d8284e144eba490d152da2ed0c547
-
Size
670KB
-
MD5
017d8284e144eba490d152da2ed0c547
-
SHA1
daf2257cf472b726fa737abd49ec7e555c0a98c0
-
SHA256
f7d06e7058a0c7624db6b517ffe7e7deffc741dc2cdbc3a0321d2b2c818f4951
-
SHA512
39dddccd7d3e7028e551ac5881b2142063091bfce6bf286391f8fb7869a93d4620b797fc7e99c2476fb63126e443f823250caa5bed77373d93a364ab8cfa2803
-
SSDEEP
12288:PiR5wXoQoIPF9pnpcYxvxZccI6JwaAQDMrMQCT5PULmMX:joQ/PF9ZvxWcEaAS0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 017d8284e144eba490d152da2ed0c547
Files
-
017d8284e144eba490d152da2ed0c547.exe windows:4 windows x86 arch:x86
d0fdd1e3d37040fc20f6f36231535fe3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetIcon
InitCommonControlsEx
ImageList_SetDragCursorImage
ImageList_AddIcon
CreateStatusWindowW
ImageList_SetIconSize
ImageList_DragShowNolock
kernel32
GetPrivateProfileStringA
GetConsoleTitleW
DeleteCriticalSection
LeaveCriticalSection
EnumResourceLanguagesW
TlsFree
GetCurrentThread
IsDebuggerPresent
CreateMutexA
GetModuleHandleA
RtlUnwind
IsValidCodePage
VirtualAlloc
GetLocaleInfoA
LCMapStringA
GetUserDefaultLCID
WideCharToMultiByte
GetDateFormatA
HeapSize
GetModuleFileNameA
GetPrivateProfileStringW
GetProcAddress
EnumSystemCodePagesW
GlobalFindAtomW
TlsSetValue
FindFirstFileA
GetCurrentProcess
SetLastError
LocalAlloc
InterlockedCompareExchange
GetConsoleOutputCP
HeapFree
OpenMutexA
GetOEMCP
lstrcmpA
ExitProcess
InterlockedIncrement
HeapDestroy
WritePrivateProfileSectionW
GetLastError
ReadFile
VirtualQuery
GetCalendarInfoW
GetCurrentDirectoryA
CreateSemaphoreA
Sleep
GetComputerNameW
GetProfileStringW
FreeLibrary
TerminateProcess
EnumTimeFormatsA
GetEnvironmentVariableW
SetStdHandle
VirtualFree
GetStartupInfoA
GetVersionExA
LoadLibraryA
GetNumberFormatA
FreeEnvironmentStringsW
GetStringTypeA
WriteConsoleW
TlsAlloc
CommConfigDialogA
GetConsoleTitleA
GetEnvironmentVariableA
WriteConsoleA
GetACP
MultiByteToWideChar
FlushFileBuffers
InterlockedDecrement
LockFile
GetProfileSectionW
CompareStringW
SetConsoleCursorInfo
HeapCreate
GetConsoleCP
UnhandledExceptionFilter
GetTickCount
GetEnvironmentStrings
CopyFileExA
CloseHandle
CompareStringA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
GetTimeFormatA
IsValidLocale
HeapAlloc
GetTimeZoneInformation
HeapReAlloc
FindAtomA
GetEnvironmentStringsW
SetFilePointer
GetCurrentThreadId
SetUnhandledExceptionFilter
LocalLock
LCMapStringW
QueryPerformanceCounter
GetCPInfo
GetCommandLineA
GetFileType
CreateFileA
WriteFile
SetEnvironmentVariableA
GetFileAttributesW
GetConsoleMode
EnumDateFormatsExA
GetStdHandle
ReadConsoleOutputW
GetStringTypeW
GetSystemTimeAsFileTime
GetModuleHandleW
DebugActiveProcess
InterlockedExchange
EnumSystemLocalesA
GetCurrentProcessId
CreateNamedPipeW
SetHandleCount
GetLocaleInfoW
FreeEnvironmentStringsA
EnterCriticalSection
TlsGetValue
user32
RegisterDeviceNotificationW
SetLastErrorEx
DlgDirListW
ShowCursor
CharNextW
CloseWindow
ActivateKeyboardLayout
GetUserObjectInformationA
CharUpperBuffA
MessageBoxIndirectA
BeginDeferWindowPos
DlgDirSelectExA
DrawAnimatedRects
GetKeyboardState
RegisterClassA
CreateDialogIndirectParamW
GetMenu
TrackMouseEvent
RegisterClassExA
OemToCharW
EnumDesktopsW
GetNextDlgTabItem
GetKeyboardLayoutNameA
ClipCursor
DialogBoxParamW
SetDlgItemTextA
Sections
.text Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ