Static task
static1
Behavioral task
behavioral1
Sample
0e906c16f20779bcb800bbab284eb75e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e906c16f20779bcb800bbab284eb75e.exe
Resource
win10v2004-20231215-en
General
-
Target
0e906c16f20779bcb800bbab284eb75e
-
Size
177KB
-
MD5
0e906c16f20779bcb800bbab284eb75e
-
SHA1
5d14d6d921d4a5aef3e7a3b32932b2ec690b5058
-
SHA256
7d42f8f7131f3ff51c17e8ace8040e4ea1645416509ce9e724ef25b39d24e1fc
-
SHA512
9f8b829519ee9ade2a8ae25df785e3b20cead94c10f01fb82ea8194b23627f25270046afb5ac3c96847fd1fa3356b5aec8a99a0174e8cb0e7a55e1f29e2dc2b8
-
SSDEEP
3072:z05lwKUhhE2SrOX//sBjtSTZLy3Ve4nXGsEG+uh89nS:osKUDarOX3ghSxA84nhEYC9nS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e906c16f20779bcb800bbab284eb75e
Files
-
0e906c16f20779bcb800bbab284eb75e.exe windows:5 windows x86 arch:x86
8768a8bb5390de0a0f375c261bd9f7f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalGetAtomNameA
GetDateFormatA
GetFileTime
GlobalSize
AreFileApisANSI
IsBadStringPtrW
GetCommandLineA
GlobalFindAtomW
MulDiv
EnumResourceLanguagesA
VerifyVersionInfoW
CreateNamedPipeA
MultiByteToWideChar
LocalUnlock
MoveFileExA
SetCommState
GetFileInformationByHandle
GetAtomNameA
ResetEvent
lstrcmpW
GetCPInfo
GetPriorityClass
WinExec
CopyFileA
CallNamedPipeW
MoveFileA
CreateNamedPipeW
GetThreadLocale
VirtualFree
VirtualProtect
SetLocalTime
GetOEMCP
GetDateFormatW
GetThreadTimes
SetMailslotInfo
GetFileAttributesW
GetACP
GlobalFree
SetPriorityClass
ReadFile
TryEnterCriticalSection
GlobalHandle
QueryPerformanceCounter
IsBadCodePtr
GetSystemTime
GetStartupInfoW
SetHandleCount
FormatMessageA
lstrcpynW
GetCurrentThread
GetSystemWindowsDirectoryA
CloseHandle
SetHandleInformation
GetLongPathNameW
gdi32
SetAbortProc
RestoreDC
SetBitmapDimensionEx
SetROP2
GetPaletteEntries
RoundRect
SelectObject
CreateHatchBrush
CreateFontA
GetObjectW
ExtTextOutW
CreateDiscardableBitmap
Polyline
GetNearestColor
SetViewportExtEx
SetViewportOrgEx
EnumFontFamiliesW
CreateBrushIndirect
ExcludeClipRect
RemoveFontResourceW
WidenPath
UnrealizeObject
GetClipBox
CreateFontW
SetDIBitsToDevice
SetPaletteEntries
GetPixel
GetDIBits
ScaleViewportExtEx
GetSystemPaletteEntries
StretchDIBits
GetMapMode
EndPage
ScaleWindowExtEx
StartPage
GetTextMetricsW
SetRectRgn
CreateRectRgnIndirect
OffsetRgn
Escape
DPtoLP
CreateRectRgn
StretchBlt
GetROP2
ResizePalette
SetWindowExtEx
EndPath
PathToRegion
user32
CharUpperBuffW
FindWindowExW
CreateDialogIndirectParamW
mouse_event
CharNextExA
CharLowerW
MonitorFromPoint
SetWindowTextW
InsertMenuItemW
EnableScrollBar
AppendMenuW
DefFrameProcW
ExitWindowsEx
CreateDialogParamA
DrawFocusRect
DefWindowProcW
DispatchMessageA
VkKeyScanW
GetDlgItemTextW
SetForegroundWindow
EnableWindow
SetUserObjectInformationW
InSendMessageEx
SendMessageTimeoutA
PeekMessageA
MapVirtualKeyA
DefWindowProcA
wsprintfA
GetTopWindow
InflateRect
SetWindowLongW
DestroyAcceleratorTable
CreateWindowExW
GetClassInfoA
LoadCursorA
CharPrevA
InvalidateRect
PostThreadMessageW
GetWindowTextW
DeleteMenu
MonitorFromRect
DrawEdge
WaitMessage
RegisterWindowMessageA
TabbedTextOutW
HiliteMenuItem
AdjustWindowRect
ClipCursor
SystemParametersInfoW
IsWindow
GetDesktopWindow
DestroyIcon
DialogBoxParamW
SetRect
SetDlgItemInt
CheckDlgButton
GetMenuState
IsCharAlphaNumericW
GetMenuItemCount
CharUpperA
GetKeyboardLayout
GetMessageTime
GetClassInfoExA
SetWindowLongA
ScrollWindowEx
GetWindow
UnloadKeyboardLayout
SetScrollInfo
GetMessagePos
UnionRect
GetIconInfo
GetClassInfoW
DeferWindowPos
IsChild
FrameRect
DestroyCursor
DrawStateA
MessageBoxExW
DrawStateW
DrawTextExW
IsMenu
SetSysColors
CharNextA
DrawFrameControl
GetFocus
LockWindowUpdate
OffsetRect
DialogBoxIndirectParamA
FindWindowA
MessageBoxA
InvalidateRgn
EndPaint
GetMenuItemRect
CreateIconFromResource
GetKeyboardLayoutNameW
OpenIcon
CreateCaret
ShowCursor
InsertMenuA
ShowOwnedPopups
IsDlgButtonChecked
ClientToScreen
AppendMenuA
DragObject
IsWindowUnicode
GetSysColorBrush
LoadImageW
TranslateAcceleratorA
PostMessageW
TrackPopupMenuEx
SetDlgItemTextW
PostQuitMessage
BeginDeferWindowPos
AdjustWindowRectEx
CheckRadioButton
GetUpdateRect
MapVirtualKeyW
GetForegroundWindow
DefFrameProcA
InvertRect
CreateIconIndirect
SetClassLongW
ole32
CoInitializeEx
advapi32
RegEnumKeyExA
CryptDecrypt
OpenEventLogW
LookupAccountNameW
RegCreateKeyW
GetLengthSid
RegQueryValueExA
RegCreateKeyA
RegCreateKeyExW
ControlService
RegEnumKeyW
RegisterServiceCtrlHandlerW
RegOpenKeyA
InitializeAcl
RegOpenKeyW
comctl32
ImageList_Write
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_GetImageCount
ImageList_Remove
ImageList_GetIcon
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psikif Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yid Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pox Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hob Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Kuduag Size: 512B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.refee Size: 512B - Virtual size: 189B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ