Static task
static1
Behavioral task
behavioral1
Sample
15a79e1ae16b8ae456acd3b437398c24.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15a79e1ae16b8ae456acd3b437398c24.exe
Resource
win10v2004-20231222-en
General
-
Target
15a79e1ae16b8ae456acd3b437398c24
-
Size
557KB
-
MD5
15a79e1ae16b8ae456acd3b437398c24
-
SHA1
0acd30b0e2591e660584cca30e969840d65fbd4d
-
SHA256
d82694be549cc54f064b6687ea8407c35f615cb4707fcaa965fdf9e8d582316c
-
SHA512
fe1c49aa5906abd97be0f37a548cb5d0ea7ba20d4911a3304c210620c840cfa140e6702ad704a6324d8989f45f8d59a68ffa6a4d5abe5f3630f3321ac2fe5586
-
SSDEEP
12288:LOhTnj/WDzhbTO52PcHlM7MAR0NySnpm0fIuAVFglnUhzuaANrJ:iRnj/WDVbYmcFMnR03m0wuDNKPAlJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15a79e1ae16b8ae456acd3b437398c24
Files
-
15a79e1ae16b8ae456acd3b437398c24.exe windows:4 windows x86 arch:x86
1ee61354f8c8659079d6fe994b4e2c46
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleA
user32
IsZoomed
GetWindowTextW
SubtractRect
OemKeyScan
DefFrameProcW
OemToCharBuffA
SetCaretBlinkTime
DrawAnimatedRects
RegisterClassW
FindWindowExW
RegisterClassA
IsDialogMessageA
CreatePopupMenu
SetClassLongA
LoadBitmapA
SendMessageTimeoutA
GetWindowLongA
FindWindowA
DestroyWindow
CreateMenu
SendInput
AppendMenuA
MoveWindow
CreateIconFromResourceEx
GetParent
DdeInitializeA
DlgDirSelectExW
GetMessagePos
SetMessageQueue
CallMsgFilterA
CheckRadioButton
CharPrevW
DdeInitializeW
ShowWindow
DrawFrame
GetClassInfoW
MsgWaitForMultipleObjectsEx
CopyIcon
GetKeyboardState
CreateDialogParamA
WindowFromDC
LoadMenuW
MessageBoxA
EnumDesktopWindows
PostQuitMessage
DefFrameProcA
GetClassLongA
PackDDElParam
DeleteMenu
EnumThreadWindows
CreateDialogIndirectParamW
GetKeyState
AdjustWindowRect
DefWindowProcA
GetMenuItemID
GetThreadDesktop
CharUpperW
SwitchDesktop
LoadMenuIndirectA
CheckMenuItem
DlgDirSelectComboBoxExA
SendMessageTimeoutW
UnregisterDeviceNotification
RegisterWindowMessageA
RegisterClassExA
GetLastActivePopup
SetDoubleClickTime
UnhookWindowsHookEx
ChangeClipboardChain
DdeDisconnect
SetProcessDefaultLayout
RedrawWindow
GetMenuItemInfoW
CreateWindowExA
MessageBoxIndirectW
HideCaret
EnumDisplaySettingsW
SetWindowContextHelpId
GetMenuContextHelpId
EnumWindowStationsW
UnpackDDElParam
OemToCharW
GetDlgItemInt
EnumDisplaySettingsExW
GetKeyboardLayoutList
ActivateKeyboardLayout
TabbedTextOutA
SetScrollInfo
DragDetect
TranslateAccelerator
SetMenuContextHelpId
GetWindowTextA
DragObject
ShowCursor
DdeQueryStringA
DispatchMessageA
GetKeyboardLayoutNameA
wininet
InternetGetCookieW
GetUrlCacheEntryInfoExW
LoadUrlCacheContent
InternetSetOptionW
DeleteUrlCacheEntry
FtpGetFileW
InternetAlgIdToStringW
GopherGetAttributeA
comctl32
DrawStatusTextA
ImageList_LoadImageA
InitCommonControlsEx
CreateMappedBitmap
kernel32
WriteConsoleInputA
GetStringTypeW
InitializeCriticalSection
GetConsoleOutputCP
GetLastError
LCMapStringA
FormatMessageA
IsBadWritePtr
OutputDebugStringW
TlsFree
InterlockedExchange
FlushViewOfFile
FillConsoleOutputAttribute
OpenMutexA
GetStdHandle
GetCurrentProcessId
SetConsoleCtrlHandler
VirtualQuery
GetOEMCP
TlsGetValue
LocalFlags
LoadLibraryExW
UnhandledExceptionFilter
GetNamedPipeHandleStateA
GetEnvironmentStrings
CompareStringW
GetCPInfo
WideCharToMultiByte
EnumResourceNamesA
FlushFileBuffers
InterlockedIncrement
SetHandleCount
AddAtomW
GetStringTypeExA
FreeLibrary
LockResource
TlsAlloc
InterlockedDecrement
FreeEnvironmentStringsA
DeleteCriticalSection
LeaveCriticalSection
GetFileType
GetStringTypeA
FindFirstFileW
CloseHandle
RtlMoveMemory
HeapReAlloc
IsValidCodePage
HeapLock
SetLastError
OpenEventW
GetProfileStringW
IsDebuggerPresent
GetStartupInfoA
GetConsoleCP
GetEnvironmentStringsW
GetSystemInfo
GetCurrentProcess
ContinueDebugEvent
LoadLibraryA
SetStdHandle
IsValidLocale
SetFilePointer
SetEnvironmentVariableA
GetTimeFormatA
FillConsoleOutputCharacterA
CompareStringA
MultiByteToWideChar
GetVersionExA
GlobalFix
WriteConsoleA
GetSystemTimeAsFileTime
RtlUnwind
IsBadReadPtr
HeapCreate
WriteConsoleW
GetCommandLineW
GetConsoleMode
GetDateFormatA
GetModuleHandleA
GetModuleFileNameA
SetEndOfFile
CreateMutexA
WriteFile
FreeEnvironmentStringsW
HeapAlloc
SetConsoleTitleW
Sleep
CreateMailslotA
EnumCalendarInfoExA
ReadFile
EnumResourceLanguagesA
WritePrivateProfileSectionW
GlobalFree
QueryPerformanceCounter
CreateFileA
TlsSetValue
VirtualAlloc
HeapFree
GetThreadPriority
GetCommandLineA
HeapSize
GetTimeZoneInformation
GetLocaleInfoW
EnumSystemLocalesA
GetProcessHeap
EnterCriticalSection
GetStartupInfoW
VirtualFree
LCMapStringW
HeapDestroy
GetCurrentThread
GetACP
GlobalCompact
GetProcAddress
GetLocaleInfoA
GetThreadSelectorEntry
ExitProcess
TerminateProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
GetUserDefaultLCID
LocalFree
GetTickCount
GetLogicalDrives
GetModuleFileNameW
shell32
SHInvokePrinterCommandA
ExtractIconExA
SHQueryRecycleBinW
SHFileOperationW
Sections
.text Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ