Static task
static1
Behavioral task
behavioral1
Sample
16c567f28a7ba0c20b11b7f060f75f15.exe
Resource
win7-20231215-en
General
-
Target
16c567f28a7ba0c20b11b7f060f75f15
-
Size
439KB
-
MD5
16c567f28a7ba0c20b11b7f060f75f15
-
SHA1
b1d3b7c865bcea6beadc885c65a9b0839ac7b784
-
SHA256
3c4458a2f621537b65fda6e5484293cdd90e92cf6211437b2e1efb1f4ef04bca
-
SHA512
a2ddc67272d8da63807d841a87591d1ba518cb67b71beb22e733a9273c9d4c08815e438afbb2e829d87a3f8b5390eaea3c3f823b8a27e8e1590fa4930368c0d6
-
SSDEEP
6144:cIMko73OQd3FcU7JjELFA+XTL1Df/FCmA5ADZaxyXdfHrtI:cIMv3dsFA+jZ3smAmda2Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16c567f28a7ba0c20b11b7f060f75f15
Files
-
16c567f28a7ba0c20b11b7f060f75f15.exe windows:5 windows x86 arch:x86
790b74ed483938fbb4b10b4c9d3b73d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
SetFilePointer
GetCurrentProcess
CreateFileA
GlobalFlags
InterlockedExchange
GetLocaleInfoA
GetCPInfo
lstrcmpW
HeapAlloc
GetStartupInfoW
HeapFree
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
ExitProcess
VirtualFree
HeapCreate
GetStdHandle
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetVersionExA
lstrcmpA
GlobalGetAtomNameA
InterlockedIncrement
GetModuleHandleW
CompareStringA
GetCurrentThreadId
CloseHandle
FormatMessageA
MultiByteToWideChar
lstrlenA
GetCurrentProcessId
GetModuleFileNameA
FreeLibrary
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedDecrement
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetLastError
SetLastError
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
VirtualProtect
GetCurrentDirectoryA
GetSystemInfo
GetTempPathA
Sleep
LocalAlloc
LocalFree
FlushFileBuffers
WaitForMultipleObjects
GetEnvironmentVariableA
GetShortPathNameA
GetTempFileNameA
GetOEMCP
GetFileAttributesA
comctl32
ImageList_DragShowNolock
ImageList_ReplaceIcon
ole32
CoInitialize
StgCreateDocfile
CoUninitialize
OleUninitialize
OleInitialize
OleSetContainedObject
oleaut32
VariantInit
VariantClear
VariantChangeType
ws2_32
socket
bind
closesocket
accept
connect
WSAStartup
WSACleanup
gpedit
ImportRSoPData
CreateGPOLink
BrowseForGPO
DeleteGPOLink
user32
DrawTextA
DrawTextExA
GrayStringA
PostQuitMessage
TabbedTextOutA
DestroyMenu
ClientToScreen
SetWindowTextA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetWindowTextA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
UnhookWindowsHookEx
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
SendMessageA
GetWindowThreadProcessId
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSysColorBrush
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
GetKeyState
PeekMessageA
ValidateRect
gdi32
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
DeleteObject
ExtTextOutA
SaveDC
RestoreDC
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
GetDeviceCaps
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
SetMapMode
Sections
.text Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ