Static task
static1
Behavioral task
behavioral1
Sample
13e045b5a2e5ed1e0dd64c55e7e9199d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13e045b5a2e5ed1e0dd64c55e7e9199d.exe
Resource
win10v2004-20231215-en
General
-
Target
13e045b5a2e5ed1e0dd64c55e7e9199d
-
Size
568KB
-
MD5
13e045b5a2e5ed1e0dd64c55e7e9199d
-
SHA1
bc4fc091b0dab3cb1f42c2c626da44600338a904
-
SHA256
d5e0c8863857f9fe5758612bd5166ddc6169bb89ed7a64eaa0cb8fa7be2c635f
-
SHA512
f2df405075a4f72aa373238d53c5e963d0d16e59cb31669e1cc1ae592869d9b58ad2e31ae89a89a33810ab97ee333f89de65aacf7d9d781b400ab50555654867
-
SSDEEP
12288:wgEHEmJNMrlHtfqZqQfy0I2gqFWxkey/jzXG:wgEkmJOffqoiy0cqFWxry//G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13e045b5a2e5ed1e0dd64c55e7e9199d
Files
-
13e045b5a2e5ed1e0dd64c55e7e9199d.exe windows:4 windows x86 arch:x86
f9de4fe4bff33a142fc0cab4d8a95736
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreateMappedBitmap
ImageList_AddMasked
DrawStatusTextW
ImageList_DrawEx
ImageList_Merge
ImageList_DragLeave
ImageList_SetFilter
CreateUpDownControl
ImageList_DragShowNolock
DrawInsert
ImageList_GetIconSize
ImageList_SetIconSize
InitCommonControlsEx
ImageList_SetBkColor
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_SetDragCursorImage
ImageList_Replace
ImageList_SetImageCount
CreatePropertySheetPageW
ImageList_Draw
user32
RegisterClassA
LookupIconIdFromDirectory
SetMessageExtraInfo
FindWindowA
TranslateMessage
GetMenuBarInfo
GetListBoxInfo
wsprintfA
EnumDisplayDevicesA
DialogBoxParamA
CharUpperBuffW
InsertMenuItemW
MessageBoxExW
RegisterClassExA
CreateCaret
GetProcessWindowStation
UnpackDDElParam
MsgWaitForMultipleObjectsEx
CloseDesktop
DdeConnectList
kernel32
IsValidCodePage
EnumSystemLocalesA
WriteFile
VirtualAllocEx
ConvertDefaultLocale
ReadFile
SetPriorityClass
DeleteCriticalSection
GetProfileSectionA
SetThreadPriority
CloseHandle
GetNumberFormatA
FindFirstFileA
VirtualQuery
LoadLibraryA
ReadConsoleInputA
GetCurrentProcess
GetTimeZoneInformation
EnterCriticalSection
VirtualFree
VirtualFreeEx
ExpandEnvironmentStringsA
LeaveCriticalSection
SetFilePointer
LocalUnlock
SetConsoleCursorInfo
InterlockedExchange
GetEnvironmentVariableW
FreeEnvironmentStringsA
FillConsoleOutputCharacterW
GetCurrentThreadId
HeapLock
EnumResourceTypesA
InitializeCriticalSection
TlsAlloc
HeapDestroy
GetCommandLineA
SetConsoleScreenBufferSize
GetEnvironmentStringsW
CreateDirectoryExW
TlsFree
OpenMutexA
TerminateProcess
SetHandleCount
RemoveDirectoryW
HeapCreate
ContinueDebugEvent
GetCurrentThread
GetWindowsDirectoryA
GetSystemInfo
GetStringTypeExW
WriteConsoleA
MapViewOfFile
LCMapStringW
GetOEMCP
GetLastError
CreateToolhelp32Snapshot
GetEnvironmentStrings
GetEnvironmentStringsA
VirtualAlloc
OpenWaitableTimerA
SetEndOfFile
FreeResource
UnlockFileEx
GetFileAttributesExW
GetTickCount
GetSystemTimeAsFileTime
GetDateFormatA
GetModuleFileNameA
RtlUnwind
IsBadWritePtr
GetSystemTime
SetStdHandle
FreeEnvironmentStringsW
WaitNamedPipeW
GetUserDefaultLCID
QueryPerformanceCounter
GetCalendarInfoW
UnhandledExceptionFilter
CompareStringW
lstrcmpA
GetCurrencyFormatW
ReadConsoleOutputCharacterA
GetVersionExA
SetThreadContext
WritePrivateProfileSectionW
GetStringTypeA
GlobalFix
SetLastError
GetFileType
GetProcAddress
HeapReAlloc
GetCPInfo
LCMapStringA
GetDriveTypeA
FindClose
CreateMutexA
HeapFree
GetStartupInfoA
TransmitCommChar
LockFile
IsValidLocale
lstrcatW
TlsGetValue
ConnectNamedPipe
ExitProcess
HeapSize
GetCommandLineW
VirtualProtect
LoadResource
GetStringTypeW
SetEnvironmentVariableA
OpenSemaphoreA
GetACP
GetPrivateProfileSectionNamesW
GetCurrentProcessId
lstrcpyn
GetLogicalDriveStringsA
OpenFileMappingA
SetEvent
GetDiskFreeSpaceExW
GetStdHandle
GetDiskFreeSpaceA
CreateEventA
FlushFileBuffers
GetProcAddress
CompareStringA
WideCharToMultiByte
TlsSetValue
GetTimeFormatA
MultiByteToWideChar
GetLocaleInfoW
GetModuleHandleA
CreateProcessW
SetConsoleOutputCP
GetTempFileNameA
EnumResourceTypesW
GetConsoleTitleA
HeapAlloc
GetLocaleInfoA
advapi32
AbortSystemShutdownA
CryptSignHashW
RegQueryInfoKeyA
RegDeleteValueW
CreateServiceW
RegOpenKeyExW
CryptGetUserKey
InitiateSystemShutdownW
CryptGenRandom
Sections
.text Size: 160KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ