Static task
static1
Behavioral task
behavioral1
Sample
016c518d029b18f76db7f08d50684044.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
016c518d029b18f76db7f08d50684044.exe
Resource
win10v2004-20231215-en
General
-
Target
016c518d029b18f76db7f08d50684044
-
Size
196KB
-
MD5
016c518d029b18f76db7f08d50684044
-
SHA1
5b187f609200a7517cb8de2022a6564c7517425d
-
SHA256
623fce93343a18ee007b6c05f0e7d53de63575c2c1d72e8d4eee12e29adab6cb
-
SHA512
30db7a55473cb0ba45d092c006c7a5fb52e36ceaaecacf579af17254abc21a8351ff82be78b70a99e0b026aa79350c6e941447c87bbf295b31f69d6ce2551624
-
SSDEEP
3072:+yPMgg+O4H5MyRWC4fPu52uqZl4U7AoHo7lOdNZwMRoLta6+OAl6L60:Phgg66Wbu5rwunTCN2+l6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 016c518d029b18f76db7f08d50684044
Files
-
016c518d029b18f76db7f08d50684044.exe windows:4 windows x86 arch:x86
b6145e3afeb470d81cbe9499bf78f804
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetFileTime
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
FreeLibrary
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
HeapFree
SetStdHandle
GetFileType
GetACP
RaiseException
HeapReAlloc
HeapSize
GlobalFlags
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStartupInfoA
GetEnvironmentVariableA
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
Sleep
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FindNextFileA
FindFirstFileA
GetLastError
SetLastError
FindClose
InterlockedExchange
LocalFree
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
HeapCreate
HeapAlloc
HeapDestroy
GetCurrentDirectoryA
GetTempPathA
CopyFileA
GetShortPathNameA
GetFileAttributesA
lstrlenA
WritePrivateProfileStringA
MultiByteToWideChar
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
FindResourceA
SizeofResource
LoadResource
CreateDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
GetCommandLineA
GetModuleHandleA
GetVersionExA
UnhandledExceptionFilter
WinExec
user32
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
ShowWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetDlgItem
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetTopWindow
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowLongA
GetClassNameA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
SetCursor
FindWindowA
PostQuitMessage
GetCapture
WinHelpA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SendMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
UnhookWindowsHookEx
GetSystemMetrics
CharUpperA
wsprintfA
PostMessageA
GetClassInfoA
MessageBoxA
gdi32
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
DeleteObject
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
comctl32
ord17
ole32
CoUninitialize
CoInitialize
CoCreateInstance
Sections
.text Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ