Static task
static1
Behavioral task
behavioral1
Sample
1168e9fc72b7fd0c0689778f3be222f5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1168e9fc72b7fd0c0689778f3be222f5.exe
Resource
win10v2004-20231215-en
General
-
Target
1168e9fc72b7fd0c0689778f3be222f5
-
Size
103KB
-
MD5
1168e9fc72b7fd0c0689778f3be222f5
-
SHA1
3fab2e8fd2cdc1ae4b6e523bdc4d18bc03d7c935
-
SHA256
b710b2d10f368bbcb30099b03f013bb2fdfbc6bcb731ee85ec98185101b6211f
-
SHA512
8d9c7e8e80d30730cb18f26927641c0025a23d5f0e56c0c4b545ff9be70a9fc97a15c0ab882e8e2fbf8761a56ecb6c5c930dfc8c0478a72ed644de977e0a2681
-
SSDEEP
3072:C3ar51ryoUlDBYqK2Q01s3Gu8ryfP4ozB3qtZF:jJjUlP6RqiLRgF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1168e9fc72b7fd0c0689778f3be222f5
Files
-
1168e9fc72b7fd0c0689778f3be222f5.exe windows:4 windows x86 arch:x86
a5170e9f78408894e794e1894b987115
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
DeleteFileA
GetCommandLineA
GetFileAttributesA
GetCommandLineA
GlobalAlloc
GetCommandLineA
GetFileType
GetCommandLineA
GetModuleHandleA
GetCommandLineA
GetStringTypeW
GetCommandLineA
GlobalFree
GetCommandLineA
GetStringTypeA
GetCommandLineA
Sleep
GetCommandLineA
FreeLibrary
comctl32
InitCommonControls
ImageList_GetImageCount
ImageList_Copy
ImageList_EndDrag
ImageList_AddIcon
ImageList_DragLeave
ImageList_BeginDrag
ImageList_Merge
ImageList_Destroy
ImageList_GetIconSize
ImageList_Remove
ImageList_GetImageInfo
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_ReplaceIcon
user32
GetDC
CloseWindow
GetDlgItem
LoadMenuA
AppendMenuA
GetCursor
DrawTextW
GetWindowTextLengthA
AlignRects
DrawTextA
AppendMenuW
GetWindowTextA
GetFocus
CalcMenuBar
DialogBoxParamW
CopyRect
LoadCursorA
CalcMenuBar
InsertMenuA
CopyIcon
LoadMenuA
EndDialog
DialogBoxParamW
LoadCursorA
CreateIcon
AppendMenuA
GetWindowTextA
IsWindow
AlignRects
CopyRect
BlockInput
CopyImage
GetCursor
AppendMenuW
GetDlgItem
DrawIcon
advapi32
RegLoadKeyW
RegReplaceKeyW
RegGetKeySecurity
RegEnumValueW
RegQueryValueW
RegQueryInfoKeyA
RegFlushKey
RegOpenKeyExA
RegCreateKeyW
RegOpenKeyA
RegDeleteKeyW
RegQueryValueA
RegOpenKeyW
RegLoadKeyA
RegQueryValueExA
RegOpenKeyExW
Sections
.t68t Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r8ata Size: 6KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r9rc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ