Static task
static1
Behavioral task
behavioral1
Sample
15a552d0174b9e6d44d14f63462f0336.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15a552d0174b9e6d44d14f63462f0336.exe
Resource
win10v2004-20231222-en
General
-
Target
15a552d0174b9e6d44d14f63462f0336
-
Size
93KB
-
MD5
15a552d0174b9e6d44d14f63462f0336
-
SHA1
1b8ded9dc276b39ad72207af4827b6f2f1facdb1
-
SHA256
cb8375028706ec7dafcf6519ac534bc3e12aa94711299b618657aefc9070eb5a
-
SHA512
0e2f26bff6f1bbf612069bc55056db57d015149419e6e82568d00ec9d8c95762f42738a3d8c9690db02853ef8ced0455e87dab9b6b28423963ea9becbd5e0997
-
SSDEEP
1536:gqxd0zoDzq4MZShahPAgiXuj+XUz7tJHVfPrcvbRhQ:gWOza8hPsuj+Ez3HBqK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15a552d0174b9e6d44d14f63462f0336
Files
-
15a552d0174b9e6d44d14f63462f0336.exe windows:5 windows x86 arch:x86
c8eadc298ec8974fd853f96a6dff17ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
FlushFileBuffers
DeleteFileA
GetStdHandle
ExitProcess
CopyFileExW
FindAtomW
GetFileTime
CreateDirectoryA
GetFileType
OpenFileMappingA
CopyFileExA
ExitThread
FindAtomA
GetCommandLineA
GetLocalTime
FindClose
GetCommandLineA
GlobalFree
FatalExit
GetLocalTime
GetPriorityClass
GetStdHandle
CopyFileA
DeleteAtom
AddAtomW
WriteFile
ExitThread
FindAtomW
GetFileType
GetCPInfo
ExitProcess
DeleteFileW
GetFileTime
FindAtomA
GetLastError
CreateDirectoryA
CopyFileExA
FlushFileBuffers
CopyFileExW
AddAtomA
ReadFile
DeleteFileW
FindClose
CopyFileExA
GetCommandLineA
FlushFileBuffers
ExitThread
CopyFileExW
ExitProcess
OpenFileMappingA
GetCPInfo
GlobalFree
WriteFile
AddAtomW
FindAtomA
FreeResource
GetCPInfo
CopyFileExA
GlobalFree
GetLastError
DeleteFileW
OpenFileMappingA
GetStdHandle
GetCommandLineA
GetLocalTime
DeleteAtom
ExitProcess
OpenFile
ExitThread
CreateDirectoryA
GetPriorityClass
CopyFileA
DeleteFileA
GetLocalTime
FlushFileBuffers
CreateDirectoryA
CopyFileExW
FreeResource
DeleteFileW
ExitThread
GetLastError
AddAtomA
GetPriorityClass
advapi32
RegReplaceKeyW
RegDeleteValueA
RegDeleteKeyA
RegReplaceKeyA
RegOpenKeyA
RegLoadKeyA
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyA
RegDeleteValueW
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegQueryValueW
RegCreateKeyA
RegOpenKeyW
RegEnumKeyExW
RegOpenKeyA
RegDeleteValueA
RegCreateKeyW
RegEnumKeyW
RegQueryValueExA
RegReplaceKeyW
RegLoadKeyW
RegCreateKeyExW
RegQueryValueExW
RegGetKeySecurity
RegOpenKeyExA
RegEnumKeyA
RegDeleteValueW
RegOpenKeyExA
RegEnumKeyA
RegDeleteValueW
RegCreateKeyExA
RegQueryInfoKeyW
RegLoadKeyA
RegReplaceKeyW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueA
RegDeleteKeyA
RegFlushKey
user32
GetFocus
CopyImage
GetWindowTextLengthA
GetDlgItem
InsertMenuA
CloseWindow
GetCursor
LoadCursorA
EndDialog
CopyRect
IsWindow
CopyIcon
GetMenu
CalcMenuBar
BeginPaint
AppendMenuA
AppendMenuW
DialogBoxParamA
GetCursor
GetMenu
GetDC
CopyIcon
DialogBoxParamW
DrawTextW
CopyRect
GetWindowTextA
BlockInput
DrawIconEx
CreateIcon
CopyImage
CloseWindow
DrawIcon
LoadMenuA
CalcMenuBar
BlockInput
GetWindowTextLengthA
EndDialog
IsWindow
GetFocus
CopyIcon
CloseWindow
GetDC
LoadMenuA
AppendMenuA
CreateIcon
AppendMenuW
Sections
.c3ch Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fg21 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.457f Size: 47KB - Virtual size: 339KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.g9474 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ