Static task
static1
Behavioral task
behavioral1
Sample
00f787338871db9977406944820860ea.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00f787338871db9977406944820860ea.exe
Resource
win10v2004-20231222-en
General
-
Target
00f787338871db9977406944820860ea
-
Size
256KB
-
MD5
00f787338871db9977406944820860ea
-
SHA1
28fae2482ec510ba54afa35e4ea9ce207c569ab4
-
SHA256
16ecabbb4a0ecd32aa15f6940ac7a545bec6029077f88bc3830e4d1a6d467767
-
SHA512
de247e90af66606fe66d614a94ca481e141c34a817374e487ae239b090040e26f9dcd6d430a42428a8b4c812a8dcd613889fb363b80511c2a50e82410fa791f0
-
SSDEEP
6144:4xdTHF6Fv0TGAUuXBGOkcxxQ8+PxBmpS2zi4ArRCbWkv:IuMTGSHrtwB32u43bWkv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00f787338871db9977406944820860ea
Files
-
00f787338871db9977406944820860ea.exe windows:4 windows x86 arch:x86
48cd92dfde6029bccfde99ceaa5b3eec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
VirtualAllocEx
LocalAlloc
RemoveDirectoryA
GetSystemDirectoryW
GetLogicalDriveStringsA
CopyFileExA
OpenEventA
GetSystemTimeAsFileTime
GetTempPathA
GetTimeFormatW
GetLogicalDriveStringsW
GetDateFormatA
DisconnectNamedPipe
CreateDirectoryA
DosDateTimeToFileTime
GetFullPathNameA
OpenWaitableTimerW
GetWindowsDirectoryA
TlsAlloc
EnumCalendarInfoW
GetModuleHandleA
CreateSemaphoreA
GetTempPathW
IsBadStringPtrA
EnumCalendarInfoA
GetHandleInformation
CopyFileA
GetLongPathNameA
MoveFileW
CreateDirectoryW
WaitForSingleObject
GetShortPathNameW
DeleteAtom
RemoveDirectoryW
CompareFileTime
FindResourceA
GetWindowsDirectoryW
OpenMutexA
WinExec
IsValidCodePage
lstrcmpW
OpenSemaphoreW
lstrlenW
GetSystemInfo
OpenWaitableTimerA
ConnectNamedPipe
FatalAppExitA
CreateEventA
GlobalFindAtomA
GetMailslotInfo
EnumTimeFormatsA
ReadDirectoryChangesW
GetAtomNameA
GetCalendarInfoW
GetSystemTime
SearchPathA
DuplicateHandle
GlobalFindAtomW
CreateNamedPipeW
lstrcpynA
QueryPerformanceFrequency
OpenMutexW
GetDiskFreeSpaceA
GetShortPathNameA
GetExpandedNameA
SetUnhandledExceptionFilter
ExpandEnvironmentStringsA
MoveFileA
GetSystemDefaultLCID
IsDebuggerPresent
lstrcpy
LocalFree
BeginUpdateResourceW
OpenSemaphoreA
CreateMailslotW
SetLocaleInfoA
AddAtomW
user32
GetClassInfoA
MonitorFromPoint
SetWindowTextA
CharUpperA
MessageBoxIndirectW
CharPrevA
MonitorFromWindow
GetMenuInfo
GetMenuItemInfoW
MessageBeep
DestroyMenu
MessageBoxA
SetFocus
CreateDialogParamW
GetAsyncKeyState
AdjustWindowRect
wsprintfA
CharPrevW
DialogBoxIndirectParamW
LoadIconW
RegisterClassA
SetWindowPos
WaitForInputIdle
mouse_event
GetMessageA
EndMenu
SetMenu
SendDlgItemMessageA
GetSysColorBrush
wvsprintfW
InsertMenuItemA
SetCursorPos
RegisterWindowMessageW
DefWindowProcW
GetDesktopWindow
GetFocus
OffsetRect
SetDlgItemTextA
RegisterWindowMessageA
RemoveMenu
LoadImageW
IsDlgButtonChecked
GetMenuItemID
GetWindowRgn
RegisterClassW
LoadIconA
EmptyClipboard
keybd_event
DefWindowProcA
SetCursor
InsertMenuA
LoadBitmapW
wsprintfW
CharUpperW
GetMenuItemRect
LoadCursorW
GetDlgItemTextW
GetCaretPos
CreateAcceleratorTableA
IsChild
CheckMenuItem
CharLowerW
GetIconInfo
GetMessageW
GetClassInfoExW
MoveWindow
GetDCEx
PeekMessageW
CreatePopupMenu
WinHelpW
MessageBoxIndirectA
ShowCaret
MessageBoxW
CreateDialogIndirectParamW
ShowCursor
IsMenu
DialogBoxIndirectParamA
wvsprintfA
CharNextA
FindWindowA
SetCapture
CreateDesktopW
GetActiveWindow
LoadMenuA
CreateWindowExA
UpdateLayeredWindow
SendMessageW
GetKeyboardType
FindWindowW
IsWindow
LoadMenuW
LoadBitmapA
EnableWindow
EndDialog
GetMenuState
GetCapture
SetDlgItemInt
IsIconic
GetMenu
TrackPopupMenu
DialogBoxParamA
GetMenuItemInfoA
CreateMenu
GetKeyboardLayout
EnumClipboardFormats
SetParent
PostMessageW
PeekMessageA
CharNextW
gdi32
CreateICW
RemoveFontResourceA
CreateMetaFileW
CreateICA
TranslateCharsetInfo
CreateFontIndirectA
CreatePalette
CreateFontIndirectExW
GetTextExtentPointW
CreateRoundRectRgn
CreateFontA
GetStockObject
CreatePolygonRgn
GetTextExtentPointA
CreateDIBPatternBrush
UpdateICMRegKeyA
GetMetaFileA
ExtCreateRegion
CreatePolyPolygonRgn
CreateFontIndirectW
RemoveFontResourceExA
cmdial32
CmCustomDialDlg
RasCustomHangUp
RasCustomDialDlg
InetDialHandler
CmReConnect
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 407KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 214KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ