Static task
static1
Behavioral task
behavioral1
Sample
0167faf2d9728eec14ebb215a033efa3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0167faf2d9728eec14ebb215a033efa3.exe
Resource
win10v2004-20231215-en
General
-
Target
0167faf2d9728eec14ebb215a033efa3
-
Size
966KB
-
MD5
0167faf2d9728eec14ebb215a033efa3
-
SHA1
811a2af17441832b6e3cf01e4975ef968fd41834
-
SHA256
53bceb7c8f2d6f1b1de3a9f63526a38137e99bfee4cf61aaecac363ab86ba937
-
SHA512
e26681af201cb05762b0abb3ec619d2a72f9a0b87b7c3a3f3e6912ae96fb9b38c4db3abc6ff5f5999088ef515c08654506571efe941d0fa1cf0c1641d27bd815
-
SSDEEP
24576:uriiZobV9zROyKXwKymKj5RBn+HVb6bUZ:uWbV9zROyRPXtRu6bUZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0167faf2d9728eec14ebb215a033efa3
Files
-
0167faf2d9728eec14ebb215a033efa3.exe windows:5 windows x86 arch:x86
6bc558f44233b0eb0508604a630c3778
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
uxtheme
OpenThemeData
GetThemeFont
GetThemeSysColor
GetThemeSysFont
IsThemeActive
GetThemeColor
CloseThemeData
DrawThemeParentBackground
user32
IsDlgButtonChecked
BeginPaint
GetParent
GetSystemMetrics
GetDlgItem
GetFocus
GetSysColor
DefWindowProcW
SetFocus
MessageBoxW
EnableWindow
IsCharAlphaNumericW
ChangeDisplaySettingsExW
EndPaint
CheckRadioButton
SendMessageTimeoutW
LoadStringW
SystemParametersInfoW
FindWindowW
RedrawWindow
MapWindowPoints
SendDlgItemMessageW
EnumDisplaySettingsW
GetSysColorBrush
KillTimer
EndDialog
FrameRect
MapDialogRect
TrackMouseEvent
SetWindowTextW
ShowWindow
CopyImage
SetTimer
DrawTextW
PostMessageW
CreateWindowExW
EnumDisplayDevicesW
CheckDlgButton
LoadBitmapW
SetWindowLongW
PtInRect
DestroyWindow
ReleaseDC
LoadCursorW
GetProcessDefaultLayout
SetWindowPos
SendMessageW
InvalidateRect
GetWindowRect
SetDlgItemTextW
FillRect
GetDC
GetWindowLongW
DialogBoxParamW
GetClientRect
DrawFocusRect
SetForegroundWindow
RegisterClassExW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
comctl32
InitCommonControlsEx
PropertySheetW
setupapi
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiOpenDeviceInterfaceW
SetupDiDestroyDeviceInfoList
kernel32
IsWow64Process
InterlockedCompareExchange
UnhandledExceptionFilter
GetCurrentProcessId
HeapFree
GetProcessHeap
VerSetConditionMask
CreateMutexW
Sleep
LocalFree
GetTickCount
GetCurrentProcess
GetStartupInfoA
GetLastError
QueryPerformanceCounter
MulDiv
TerminateProcess
HeapAlloc
GetModuleHandleA
VerifyVersionInfoW
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
InterlockedExchange
CloseHandle
GetCurrentThreadId
ole32
CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoGetObject
CoUninitialize
StringFromGUID2
tapi32
lineClose
lineAccept
gdi32
StretchBlt
SetBkMode
SetStretchBltMode
GdiAlphaBlend
CreateCompatibleDC
CreateFontIndirectW
GdiSetBatchLimit
PatBlt
CreateCompatibleBitmap
BitBlt
GetStockObject
SetBkColor
SetTextColor
SelectObject
GetTextMetricsW
CreatePen
GetDeviceCaps
GetObjectW
Polyline
DeleteObject
CreateSolidBrush
DeleteDC
msvcrt
??1exception@@UAE@XZ
free
__getmainargs
_cexit
wcschr
__setusermatherr
__set_app_type
_unlock
__p__commode
_lock
_vsnwprintf
_ismbblead
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_exit
??0exception@@QAE@XZ
__p__fmode
??1type_info@@UAE@XZ
_purecall
exit
_XcptFilter
?terminate@@YAXXZ
__dllonexit
_controlfp
_initterm
?what@exception@@UBEPBDXZ
_wtoi
_callnewh
malloc
_acmdln
_amsg_exit
_onexit
memset
realloc
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 576KB - Virtual size: 575KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 356KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ