Static task
static1
Behavioral task
behavioral1
Sample
0e8169bd0199567b1b87b319fedd0731.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0e8169bd0199567b1b87b319fedd0731.exe
Resource
win10v2004-20231215-en
General
-
Target
0e8169bd0199567b1b87b319fedd0731
-
Size
173KB
-
MD5
0e8169bd0199567b1b87b319fedd0731
-
SHA1
b6ae50be966bf428198123894c45b6bc8b2e06e5
-
SHA256
31ca86832e3083bfa7215d45446478c8b22d0a2f3144b35e594f90d197957ab7
-
SHA512
f2cac81147e8a0ed8de30e09659fda99abb4c944bc730ccc9b59ed63330860d9245cc9be838203850fa906e0777be0a6d741601f908d1886c1ce9de8ca8a4ecd
-
SSDEEP
3072:KikdYkPuXhgXpjaubweQb5u4dL5Lp2OG75engtD4GzXxNarGZmjMR0fGHXjBz:noYkPu8xaNNdZIOGFl4gMVfG3jB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e8169bd0199567b1b87b319fedd0731
Files
-
0e8169bd0199567b1b87b319fedd0731.exe windows:4 windows x86 arch:x86
009f5f0a5b6c7f659f6d7abfaaa4b24a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetLastError
MapViewOfFile
DeleteFileA
VerifyVersionInfoW
RemoveDirectoryA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
CreateProcessA
Sleep
lstrlenA
UnmapViewOfFile
IsBadReadPtr
ReadFile
FindFirstFileA
FindClose
lstrcmpiA
lstrcpynA
WriteFile
GetDriveTypeA
SetFilePointer
GetFileAttributesA
GetPrivateProfileIntA
CreateEventA
QueryPerformanceFrequency
lstrcatA
ReleaseMutex
GetSystemDefaultLangID
CreateMutexA
SetErrorMode
GetSystemDirectoryA
MulDiv
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
FlushFileBuffers
SetStdHandle
LoadLibraryA
FreeLibrary
GetDiskFreeSpaceA
GetTickCount
FindResourceExA
GetWindowsDirectoryA
InterlockedDecrement
LocalFree
InterlockedIncrement
FormatMessageA
GetTempPathA
GetVersionExA
CreateFileA
GlobalFree
FindResourceA
LoadResource
SizeofResource
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
WaitForSingleObject
SetLastError
ExitProcess
lstrcpyA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
HeapCreate
IsBadCodePtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentVariableA
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetOEMCP
GetACP
GetCPInfo
GetCommandLineA
GetStartupInfoA
RaiseException
HeapAlloc
HeapFree
RtlUnwind
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
HeapSize
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapReAlloc
SearchPathA
FindNextFileA
GetTempFileNameA
GetExitCodeProcess
OpenProcess
CompareFileTime
GetProcessTimes
TerminateProcess
GetLocalTime
InitializeCriticalSection
GetCurrentProcessId
GetVersion
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
VirtualProtect
ResetEvent
SetEvent
QueryPerformanceCounter
SystemTimeToFileTime
lstrcmpA
MoveFileExA
InterlockedExchange
DeleteCriticalSection
VirtualAlloc
user32
CharLowerA
IsWindowVisible
SetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
IsDlgButtonChecked
GetDlgItemTextA
GetDlgItemInt
IsChild
GetDialogBaseUnits
GetDoubleClickTime
CreateDialogParamA
RegisterWindowMessageA
CheckRadioButton
ShowScrollBar
SetScrollInfo
GetScrollInfo
GetDlgCtrlID
GetWindowTextLengthA
GetLastActivePopup
WaitMessage
GetUpdateRect
GetMessageTime
ExcludeUpdateRgn
GetUpdateRgn
ValidateRect
IsRectEmpty
InvertRect
FrameRect
SetParent
RegisterClipboardFormatA
IsClipboardFormatAvailable
GetPriorityClipboardFormat
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardFormatNameA
SetClipboardData
GetClipboardData
GetCaretPos
SetCaretPos
CreateCaret
DestroyCaret
BeginPaint
EndPaint
GetWindowDC
VkKeyScanA
SetClassLongA
DestroyCursor
EnumChildWindows
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
DdeCreateDataHandle
DdeGetData
DdeCmpStringHandles
DdeKeepStringHandle
GetForegroundWindow
DdeEnableCallback
DdeUninitialize
DdeInitializeA
DdeNameService
DdeClientTransaction
DdeDisconnect
DdeFreeStringHandle
DdeCreateStringHandleA
DdeConnect
DdeGetLastError
DdeQueryStringA
DrawTextA
LoadCursorA
DialogBoxIndirectParamA
GetDC
ReleaseDC
EnumThreadWindows
IsCharAlphaA
RemovePropA
SetPropA
TrackPopupMenu
InflateRect
ShowCaret
HideCaret
SetActiveWindow
InvalidateRgn
RegisterClassA
RegisterClassExA
GetClassInfoA
UnregisterClassA
CreateWindowExA
GetMenuItemID
EnableMenuItem
DrawMenuBar
GetSystemMenu
RemoveMenu
GetMenuStringA
GetSubMenu
LoadMenuA
ModifyMenuA
CheckMenuItem
DefMDIChildProcA
GetWindowPlacement
SetWindowPos
GetWindow
GetTopWindow
DeleteMenu
GetDlgItem
EndDialog
GetWindowTextA
SetWindowTextA
PostMessageA
IsWindow
LoadIconA
CreateMenu
AppendMenuA
SetMenu
DefFrameProcA
PostQuitMessage
SetWindowsHookExA
UnhookWindowsHookEx
GetMessagePos
GetMenu
GetMenuItemCount
ReplyMessage
IsDialogMessageA
TranslateMDISysAccel
IsZoomed
KillTimer
FlashWindow
EqualRect
DestroyMenu
GetSystemMetrics
LoadBitmapA
SetMessageQueue
MessageBoxA
CallNextHookEx
IsIconic
EnableWindow
GetActiveWindow
IsWindowEnabled
GetAsyncKeyState
SetFocus
InSendMessage
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
GetClassLongA
ShowWindow
SetCapture
SetRect
PeekMessageA
GetKeyState
ReleaseCapture
IsCharAlphaNumericA
FillRect
InvalidateRect
ClientToScreen
DdePostAdvise
DdeAccessData
DdeUnaccessData
SetForegroundWindow
InsertMenuA
DdeFreeDataHandle
GetPropA
DdeAddData
PtInRect
CallWindowProcA
CharUpperA
GetFocus
GetSysColor
DrawFocusRect
GetWindowRect
ScreenToClient
MoveWindow
SetWindowLongA
DefWindowProcA
DestroyWindow
GetScrollPos
SetScrollRange
GetWindowLongA
GetParent
BringWindowToTop
GetScrollRange
UpdateWindow
ScrollWindow
SetScrollPos
GetClientRect
IntersectRect
OffsetRect
ShowCursor
MessageBeep
GetCapture
GetCursorPos
WindowFromPoint
SetCursor
SendMessageA
GetClassInfoExA
shell32
ExtractIconA
Shell_NotifyIconA
ShellExecuteA
advapi32
RegQueryValueExW
RegEnumValueA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
ole32
OleUninitialize
CoQueryProxyBlanket
OleQueryCreateFromData
OleInitialize
Sections
.text Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ