Static task
static1
Behavioral task
behavioral1
Sample
013da76956e0d4ecf12b6eab6404c9c7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
013da76956e0d4ecf12b6eab6404c9c7.exe
Resource
win10v2004-20231215-en
General
-
Target
013da76956e0d4ecf12b6eab6404c9c7
-
Size
101KB
-
MD5
013da76956e0d4ecf12b6eab6404c9c7
-
SHA1
78b3869e286d5a40b5d0019ea771570da0062587
-
SHA256
69b7bce317488ba7f2d34c5b0495d1d81bc77366f7cf2fb5dacd4f71e8420976
-
SHA512
7a0922ad4e29b6cc336da16bc3ad78a4c30eb8a8952921e24268b7c07db94ad9dff3fd87e1b9ea130c8f61bfb75683b5b9e4374bb602345c9a7d90512520d178
-
SSDEEP
3072:L9xKpEEEeRVP9HZYSqX6qYp7vymDdmKcnvR:LepEe/dZ2KqYp7vyadmKAR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 013da76956e0d4ecf12b6eab6404c9c7
Files
-
013da76956e0d4ecf12b6eab6404c9c7.exe windows:4 windows x86 arch:x86
ee9bbd5839bc7663d59d03ee28d5a1b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindow
CreateIcon
AlignRects
AppendMenuA
GetDlgItem
LoadMenuA
DrawIconEx
BlockInput
AppendMenuW
GetWindowTextA
IsMenu
GetFocus
GetCursor
CopyImage
DialogBoxParamA
CalcMenuBar
DialogBoxParamW
DrawTextW
DrawIcon
GetWindowTextLengthA
CreateIcon
GetDlgItem
InsertMenuA
AlignRects
DialogBoxParamW
GetCursor
CopyRect
EndDialog
DrawTextW
IsMenu
AppendMenuW
CalcMenuBar
IsWindow
DrawTextA
BlockInput
CloseWindow
CopyIcon
GetMenu
LoadCursorA
GetDC
AppendMenuA
GetWindowTextA
DrawIcon
comctl32
ImageList_Copy
ImageList_DragLeave
ImageList_LoadImage
ImageList_Read
ImageList_BeginDrag
ImageList_Replace
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Merge
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_GetIcon
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_LoadImageA
ImageList_AddIcon
ImageList_DrawEx
ImageList_EndDrag
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_Remove
ImageList_DragEnter
ImageList_DrawEx
ImageList_AddMasked
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_GetIcon
ImageList_Create
ImageList_Copy
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_Destroy
ImageList_LoadImageA
ImageList_AddIcon
ImageList_GetDragImage
ImageList_DrawIndirect
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_DragLeave
ImageList_Replace
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_Read
ImageList_Create
ImageList_Draw
ImageList_EndDrag
ImageList_AddIcon
ImageList_GetDragImage
ImageList_ReplaceIcon
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_DragMove
ImageList_DrawEx
advapi32
RegQueryValueW
RegCreateKeyW
RegOpenKeyExA
RegEnumValueW
RegLoadKeyW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegCreateKeyExW
RegEnumKeyExA
RegGetKeySecurity
RegFlushKey
RegDeleteKeyA
RegCreateKeyExA
RegReplaceKeyA
RegEnumKeyW
RegOpenKeyA
RegQueryValueExA
RegEnumValueA
RegGetKeySecurity
RegOpenKeyExA
RegLoadKeyA
RegDeleteValueW
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyExW
RegFlushKey
RegQueryValueExA
RegEnumValueW
RegQueryInfoKeyA
RegCreateKeyExW
RegLoadKeyW
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
kernel32
CreateThread
CopyFileW
FindFirstFileA
Sleep
GetFileSize
ExitThread
DeleteAtom
GetConsoleMode
ReadConsoleA
CreateDirectoryA
GlobalFree
CreateProcessA
FindAtomA
GetComputerNameA
CopyFileExW
WriteFile
SetLastError
OpenFile
CopyFileA
ReadFile
GetCommandLineA
OpenFileMappingA
DeleteFileW
GetLastError
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 182B
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ