Static task
static1
Behavioral task
behavioral1
Sample
15751c359dbced26328bfeb012a0af41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15751c359dbced26328bfeb012a0af41.exe
Resource
win10v2004-20231215-en
General
-
Target
15751c359dbced26328bfeb012a0af41
-
Size
71KB
-
MD5
15751c359dbced26328bfeb012a0af41
-
SHA1
accde0aaa79c3bab7517a12bde3c4c025cc6ba93
-
SHA256
fb83a116df8516cf54604fc0c4d08c9f66d149648fc9fa237dc530935fdab788
-
SHA512
54c09b2a0adba0785ae88478aff7c6e45ad148c8dc0e7e176171bb600e69212ab5f9d8191ac5a1e832fd7703e77adf51ea0bc5ebe9d2be487d2619e59308bcd0
-
SSDEEP
1536:/z64wrSQmJm/jJLyMu0ULn7sbKBZNufcHEdR:/zHwrDmuOMb0sbkZNufi0R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15751c359dbced26328bfeb012a0af41
Files
-
15751c359dbced26328bfeb012a0af41.exe windows:4 windows x86 arch:x86
269464e2fecf729320f61fde988a7d6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegEnumKeyExA
RegCreateKeyExA
RegEnumValueA
RegDeleteValueA
RegEnumKeyExW
RegOpenKeyA
RegDeleteKeyA
RegDeleteValueW
RegQueryValueExW
RegQueryValueA
RegEnumKeyW
RegEnumValueW
RegQueryValueExA
RegOpenKeyW
RegQueryValueW
RegEnumKeyA
RegCreateKeyW
RegOpenKeyExA
RegCreateKeyExW
RegCreateKeyA
RegSetValueA
RegSetValueW
user32
EndDialog
CopyIcon
GetCursor
GetFocus
CreateIcon
DrawIconEx
DrawIcon
LoadCursorA
CloseWindow
DialogBoxParamW
LoadMenuA
CopyImage
IsWindow
DrawTextA
IsMenu
GetWindowTextA
GetMenu
InsertMenuA
GetDC
GetWindowTextLengthA
GetDlgItem
DialogBoxParamA
DrawTextW
comctl32
ImageList_Destroy
ImageList_AddIcon
ImageList_GetIconSize
ImageList_EndDrag
CreateMappedBitmap
DllGetVersion
ImageList_LoadImageA
DrawStatusTextW
CreateUpDownControl
ImageList_DragEnter
MenuHelp
DrawStatusText
ImageList_Create
ImageList_LoadImageW
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 85KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 161B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ