Static task
static1
Behavioral task
behavioral1
Sample
161f2ee8bfebd22aaa38a41cdc8ba71b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
161f2ee8bfebd22aaa38a41cdc8ba71b.exe
Resource
win10v2004-20231215-en
General
-
Target
161f2ee8bfebd22aaa38a41cdc8ba71b
-
Size
576KB
-
MD5
161f2ee8bfebd22aaa38a41cdc8ba71b
-
SHA1
6f6f265038db080fab9048681887db586fb1e10f
-
SHA256
ac3ea96d101f078b3fc7cf3abc70192114933a85ece9370fab2fe9abfa7fbb72
-
SHA512
88555bc0dbceabcec70e603eef57a12aaef7f037aa215d5a30d6626918b33475b0083e0f3cd93e6d5c020db52e63fc25ac76aa044bc6ec24f638c5ce1c1ce78b
-
SSDEEP
12288:a9NTftjptOYBhQcb28n7GZSy3oFXP9oEet1nn3:kNTnt5Prn7Gf8XPx2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 161f2ee8bfebd22aaa38a41cdc8ba71b
Files
-
161f2ee8bfebd22aaa38a41cdc8ba71b.exe windows:4 windows x86 arch:x86
94ee44643f4eed2b6adab6d05c72f6c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetFindNextFileW
HttpSendRequestW
InternetShowSecurityInfoByURLA
HttpCheckDavCompliance
GopherOpenFileA
comctl32
DrawStatusTextA
ImageList_Create
CreateStatusWindow
ImageList_SetIconSize
InitCommonControlsEx
ImageList_SetFilter
ImageList_Destroy
ImageList_DragLeave
CreateToolbar
ImageList_SetDragCursorImage
ImageList_DragEnter
kernel32
GetLastError
SetEnvironmentVariableW
GetModuleFileNameA
TerminateProcess
GetTimeZoneInformation
GetEnvironmentVariableA
GetNumberFormatA
GetDriveTypeA
VirtualFree
HeapAlloc
QueryPerformanceCounter
GetOEMCP
CompareStringA
TlsFree
FlushInstructionCache
GetLocalTime
WritePrivateProfileStructA
WriteConsoleInputW
GetComputerNameA
GetTickCount
IsValidCodePage
GetPrivateProfileSectionA
GetLocaleInfoW
OpenMutexA
GetFileType
RtlUnwind
AddAtomA
GetVersionExA
ReadFileEx
GetConsoleMode
RemoveDirectoryW
SetConsoleCtrlHandler
DeleteAtom
InitializeCriticalSection
CreatePipe
MoveFileExW
Sleep
GetCurrentProcessId
VirtualQuery
GetModuleHandleA
SetSystemTime
FreeEnvironmentStringsW
FreeLibrary
FreeEnvironmentStringsA
GetModuleFileNameW
MultiByteToWideChar
IsDebuggerPresent
UnhandledExceptionFilter
TlsGetValue
SetConsoleMode
InterlockedDecrement
EnumSystemLocalesA
GetEnvironmentStrings
SetStdHandle
GetProcAddress
FlushFileBuffers
GetThreadLocale
AddAtomW
VirtualProtect
GetCurrentThread
GetLongPathNameA
ReadFile
GetLocaleInfoA
SetHandleCount
LCMapStringA
HeapSize
TlsSetValue
SetUnhandledExceptionFilter
GetPrivateProfileIntW
LCMapStringW
GetStdHandle
GetProcessHeap
VirtualFreeEx
RemoveDirectoryA
LockResource
GetCommandLineW
CloseHandle
GetUserDefaultLCID
GetTimeFormatA
MoveFileA
GetFullPathNameW
InterlockedExchange
GetCurrentProcess
WriteFile
HeapReAlloc
HeapFree
GetStartupInfoW
InterlockedIncrement
GetStringTypeW
SetFilePointer
TlsAlloc
WriteConsoleOutputCharacterW
GetConsoleOutputCP
CompareStringW
GetCommandLineA
DeleteCriticalSection
GetCurrentThreadId
CreateFileA
WriteConsoleW
GetConsoleCP
RaiseException
SetEnvironmentVariableA
LeaveCriticalSection
GetExitCodeProcess
GetCPInfo
WideCharToMultiByte
EnumCalendarInfoExA
CreateMutexA
HeapDestroy
SetConsoleCP
HeapCreate
GetSystemTimeAsFileTime
EnterCriticalSection
SetLastError
GetACP
ExitProcess
VirtualAlloc
GetComputerNameW
IsValidLocale
GetStringTypeA
GetDateFormatA
WriteConsoleA
GetEnvironmentStringsW
FillConsoleOutputCharacterA
LoadLibraryA
GetStartupInfoA
user32
RegisterClipboardFormatW
PostThreadMessageW
GetDlgItemTextW
DdeKeepStringHandle
OpenWindowStationA
GetListBoxInfo
GetClassInfoExW
DragDetect
MessageBoxW
DestroyWindow
DefWindowProcA
BeginPaint
DialogBoxIndirectParamW
CreateWindowExW
DdeCmpStringHandles
ShowWindow
MessageBoxExA
RegisterClassExA
DestroyAcceleratorTable
SetWindowsHookA
RegisterClassA
CloseClipboard
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ