Static task
static1
Behavioral task
behavioral1
Sample
0b170859bdac3d89148a1356dc013374.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b170859bdac3d89148a1356dc013374.exe
Resource
win10v2004-20231215-en
General
-
Target
0b170859bdac3d89148a1356dc013374
-
Size
244KB
-
MD5
0b170859bdac3d89148a1356dc013374
-
SHA1
69405ddbb1ed939724bac7302778f9b3ae49d392
-
SHA256
0875fdabea92bce0ec9cd3764ee370f21634cab26a90bc7c4a373853d95506ed
-
SHA512
d813e024ce722f0eb80eaa65669166cfc695fccce80b99c1a4e44c6dfda5edbce9cafc76a40f1d55895261b3d36c72b01478f63b431828ceb7a461cfa1d5288c
-
SSDEEP
6144:Rkc5WmNXdkZZddddddddddddqdKblMdddaZ0ddddddddddddQIdXlVddddddddd4:RF5Wm1KblXH8Xdi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b170859bdac3d89148a1356dc013374
Files
-
0b170859bdac3d89148a1356dc013374.exe windows:4 windows x86 arch:x86
d1d4647b3f8a63a08ddcca1b274e105b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
HeapReAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
SetFilePointer
GetLastError
WriteFile
RtlUnwind
HeapFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
VirtualFree
LoadLibraryA
GetProcAddress
GlobalAddAtomA
lstrcmpA
GlobalFindAtomA
lstrlenA
FindResourceA
LoadResource
LockResource
SizeofResource
VirtualAlloc
HeapDestroy
CloseHandle
user32
MessageBeep
GetWindowDC
PostQuitMessage
LoadStringA
DestroyWindow
DialogBoxParamA
WinHelpA
SetWindowTextA
ClientToScreen
WindowFromPoint
SetWindowPos
SendMessageA
LoadIconA
GetSystemMenu
GetMenu
GetSubMenu
SetTimer
ShowWindow
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetWindowTextA
InflateRect
InvalidateRect
MessageBoxA
GetFocus
GetDC
ReleaseDC
DefWindowProcA
BeginPaint
FillRect
EndPaint
GetWindowLongA
SetWindowLongA
MoveWindow
GetClientRect
GetSystemMetrics
CreateWindowExA
GetSysColor
LoadCursorA
RegisterClassA
gdi32
CreateSolidBrush
CreateFontIndirectA
EnumFontsA
SetTextColor
SetBkColor
ExtTextOutA
CreateFontA
GetObjectA
SelectObject
GetTextMetricsA
DeleteObject
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ