Static task
static1
Behavioral task
behavioral1
Sample
1e6c298d19c497c180a780d920ba342c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e6c298d19c497c180a780d920ba342c.exe
Resource
win10v2004-20231215-en
General
-
Target
1e6c298d19c497c180a780d920ba342c
-
Size
180KB
-
MD5
1e6c298d19c497c180a780d920ba342c
-
SHA1
727d722151e9a97cb2b65addbdf6e4ec813c329a
-
SHA256
9b14545ab9490a502ddbb7e51b3376a5b2a30509f52a612b1a4765d0a2ac6693
-
SHA512
507d97b69446ead3b7360b9afee624fd7bd58817287a1586b38f2223c7997ed4e54708b58e63ac7b9bc183ce18f9f93020acb9c6d541ec5dac65652d6654dae6
-
SSDEEP
3072:9D26WIXy9vxDLyVvr1QwlLIKQzgpAtJ1llrP8bUzW5FjbmMj6Qrxa1:9D26WIC9JcCwmKRCNrPf2Na
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e6c298d19c497c180a780d920ba342c
Files
-
1e6c298d19c497c180a780d920ba342c.exe windows:4 windows x86 arch:x86
5e72ff299fb9ceafe8d6e047fe592c48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
CreateToolbarEx
kernel32
GetSystemDirectoryA
QueryPerformanceFrequency
GetVersion
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcatA
HeapFree
lstrlenA
lstrcpyA
HeapAlloc
GetProcessHeap
ReadProcessMemory
OpenProcess
Sleep
GetUserDefaultLangID
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
ReadFile
GetStringTypeW
GetStringTypeA
GetLastError
SetFilePointer
FlushFileBuffers
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
WriteFile
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
DeleteFileA
GetCurrentDirectoryA
GetCurrentProcessId
GetLogicalDrives
GetDriveTypeA
CloseHandle
GetTickCount
LoadLibraryA
FreeLibrary
FileTimeToLocalFileTime
FileTimeToSystemTime
DosDateTimeToFileTime
GetTimeFormatA
DeviceIoControl
FormatMessageA
LocalFree
GetModuleHandleA
GetProcAddress
LCMapStringW
SetLastError
CreateFileA
FindResourceA
LoadResource
SizeofResource
LockResource
GetCurrentProcess
MultiByteToWideChar
user32
EmptyClipboard
OpenClipboard
CallWindowProcA
GetClientRect
DrawIconEx
SetWindowLongA
SetWindowTextA
DestroyIcon
IsZoomed
IsIconic
GetSystemMetrics
ClientToScreen
ScreenToClient
GetDlgItemTextA
EnableWindow
IsWindowEnabled
SetDlgItemTextA
CheckDlgButton
CheckRadioButton
LoadAcceleratorsA
SetClipboardData
GetMessageA
TranslateAcceleratorA
IsWindow
SetCursor
InvalidateRect
ChildWindowFromPoint
GetSysColor
GetSysColorBrush
LoadCursorA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
RegisterClassA
SetCapture
DialogBoxParamA
GetMenu
EnableMenuItem
CloseClipboard
GetFocus
RegisterWindowMessageA
DrawTextA
GetDlgItem
MoveWindow
GetWindowRect
GetParent
CreateMenu
InsertMenuA
SetTimer
ReleaseCapture
SetFocus
DefWindowProcA
BeginPaint
EndPaint
GetCursorPos
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
LoadStringA
GetDC
ReleaseDC
WinHelpA
InvalidateRgn
SetWindowPos
PostMessageA
DestroyWindow
CheckMenuItem
SendMessageA
PostQuitMessage
MessageBoxA
EndDialog
IsDlgButtonChecked
gdi32
GetTextExtentPoint32A
SetBkColor
CreateSolidBrush
GetTextMetricsA
CreateCompatibleDC
DeleteObject
GetStockObject
GetObjectA
CreateFontIndirectA
SetBkMode
SetTextColor
ExtTextOutA
SelectObject
comdlg32
GetOpenFileNameA
FindTextA
ChooseColorA
ChooseFontA
GetSaveFileNameA
advapi32
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyA
RegQueryValueExA
GetTokenInformation
LookupAccountSidA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
AdjustTokenPrivileges
shell32
ShellExecuteExA
ShellExecuteA
SHGetFileInfoA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ