Static task
static1
Behavioral task
behavioral1
Sample
0ec527b8332f423085cf6c5f5a10f1bc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ec527b8332f423085cf6c5f5a10f1bc.exe
Resource
win10v2004-20231215-en
General
-
Target
0ec527b8332f423085cf6c5f5a10f1bc
-
Size
676KB
-
MD5
0ec527b8332f423085cf6c5f5a10f1bc
-
SHA1
52fa802692420cfb54fe6e7c1fa1553138adb5f3
-
SHA256
1bcbe92ab66dc2d347ba63be9b5ada35b044229a8452562cc41a63b676464fcf
-
SHA512
0d2487aec0bd89e7b83feb26b1b48e093f5f3efec342e3b57107a320b645e5b581c2e0b29c7a4a02c691e469a01b6d6d84c3e2b73d1fe12769ba949b66d156f9
-
SSDEEP
12288:CIt8UizB6Xwv7KQsBxFzoihPN0lfT3fhKVEnJh1cJknzdG/xG8hDEcgn:CISPzB6XwwBxVydTJKyMGM/MmEcgn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec527b8332f423085cf6c5f5a10f1bc
Files
-
0ec527b8332f423085cf6c5f5a10f1bc.exe windows:4 windows x86 arch:x86
5ff6798c8d97a05428c5a1fa96a10e2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterDeviceNotificationA
CheckRadioButton
IsClipboardFormatAvailable
FlashWindowEx
LoadMenuW
SetDebugErrorLevel
GetAltTabInfo
DdeSetUserHandle
DefWindowProcW
InsertMenuW
ReplyMessage
IntersectRect
CharLowerBuffW
SetTimer
DlgDirListComboBoxW
MessageBoxA
ValidateRect
BringWindowToTop
MessageBoxExW
RegisterClassExA
DestroyWindow
GetDlgItemInt
ShowWindow
SetDlgItemTextW
LoadAcceleratorsW
LookupIconIdFromDirectory
CheckMenuRadioItem
SetShellWindow
ActivateKeyboardLayout
ShowOwnedPopups
RemovePropA
EnumDisplayDevicesA
ShowCaret
DrawEdge
DialogBoxParamA
AnimateWindow
PostMessageA
RemoveMenu
GetPropA
CloseWindowStation
RealChildWindowFromPoint
SendDlgItemMessageA
DefDlgProcW
CreateWindowExA
UnhookWinEvent
CharUpperA
ImpersonateDdeClientWindow
RegisterClassA
DialogBoxIndirectParamA
CharUpperBuffA
DdeQueryStringW
kernel32
LCMapStringW
GetExitCodeProcess
GetStdHandle
SetWaitableTimer
GetACP
GetTimeZoneInformation
InterlockedExchange
SetLastError
ReleaseMutex
VirtualFreeEx
VirtualQuery
GetModuleHandleA
HeapCreate
SetConsoleCtrlHandler
TlsSetValue
GetCurrentProcess
EnumSystemLocalesA
GetStartupInfoA
GetProfileSectionA
GetModuleFileNameA
GetDriveTypeW
HeapSize
ExpandEnvironmentStringsW
FindResourceW
GetPrivateProfileStringA
HeapFree
WritePrivateProfileStringA
SetFileAttributesW
GetLocaleInfoW
GetDateFormatA
TlsFree
FreeEnvironmentStringsW
LoadLibraryA
VirtualFree
QueryPerformanceCounter
GetCurrentThread
GetStringTypeA
GetProcAddress
lstrcat
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
CloseHandle
lstrcmpA
VirtualProtect
IsDebuggerPresent
Sleep
CommConfigDialogW
SetEnvironmentVariableA
OpenMutexA
ReadFile
MoveFileW
FlushConsoleInputBuffer
WriteConsoleOutputCharacterW
SetStdHandle
WriteFile
EnumDateFormatsExW
InterlockedIncrement
GetLocaleInfoA
GetProcessShutdownParameters
SetConsoleMode
GetConsoleCursorInfo
CreateSemaphoreW
GetShortPathNameA
HeapReAlloc
FreeEnvironmentStringsA
CreateFileW
FindAtomA
GetTimeFormatA
GlobalDeleteAtom
GetStringTypeW
GetVersionExA
TlsAlloc
ExitProcess
HeapDestroy
LeaveCriticalSection
GetCPInfo
CreateFileMappingW
FreeLibraryAndExitThread
CompareStringA
lstrcmpiA
CreateEventW
OpenWaitableTimerW
GetLastError
VirtualAlloc
DeleteCriticalSection
HeapAlloc
GetEnvironmentStrings
IsValidCodePage
GetFileAttributesExW
SetHandleCount
GetOEMCP
RtlZeroMemory
UnhandledExceptionFilter
GetCommandLineA
InitializeCriticalSection
GetSystemInfo
ReadConsoleInputA
MultiByteToWideChar
FormatMessageA
ReleaseSemaphore
LCMapStringA
WideCharToMultiByte
IsBadWritePtr
FlushFileBuffers
GetUserDefaultLCID
AllocConsole
IsValidLocale
SetFilePointer
RtlUnwind
EnterCriticalSection
GetCurrentThreadId
TerminateProcess
TlsGetValue
GetStringTypeExA
GetFileType
CreateMutexA
CompareStringW
GetEnvironmentStringsW
ReadConsoleOutputCharacterW
lstrcmpi
lstrlen
comctl32
ImageList_Copy
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_Destroy
ImageList_GetImageRect
ImageList_Remove
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_Add
ImageList_LoadImageA
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ