Static task
static1
Behavioral task
behavioral1
Sample
17966dceca35e10e21cff0b0ef2a01eb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17966dceca35e10e21cff0b0ef2a01eb.exe
Resource
win10v2004-20231215-en
General
-
Target
17966dceca35e10e21cff0b0ef2a01eb
-
Size
385KB
-
MD5
17966dceca35e10e21cff0b0ef2a01eb
-
SHA1
e9e85a2f260c7a6d233a2d274e11d8a7a58a9451
-
SHA256
bce53b1fc9136ef8ce4a1a77d27d853c4b40340ca98e07b6f929c7f187156fb4
-
SHA512
dbcc352e8e977597a0d8182c914fab613b847614ff4303807e757b4c0ed6990795a99b2a7bbc2644115e49da47d0d0914964b14b1be8b6f0f3b10783728a0473
-
SSDEEP
6144:Q5/WtSloZ5Ek+/Cl0aOFPX1th1Rs2oZB+11njOv2ob/nde2eM/VNBKECKF4ZlSRR:QwUlHk+COrttze2y/nU2eK0KFuS4hU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17966dceca35e10e21cff0b0ef2a01eb
Files
-
17966dceca35e10e21cff0b0ef2a01eb.exe windows:4 windows x86 arch:x86
95ddf6553b432bc36a93fbbb6804923a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
lstrcpyA
lstrlenA
Sleep
SetEvent
VirtualFree
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceExA
GetLastError
VirtualProtect
GetModuleHandleA
ResumeThread
GetCurrentThreadId
SuspendThread
LocalAlloc
GlobalFree
WriteFile
CreateFileA
GlobalAlloc
LoadLibraryA
SystemTimeToFileTime
GetSystemTime
LCMapStringA
FreeLibrary
GetStringTypeA
MultiByteToWideChar
RaiseException
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
RtlUnwind
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
GetVersion
LCMapStringW
GetCommandLineA
GetStartupInfoA
GetModuleFileNameA
VirtualQuery
CreateEventA
LoadLibraryW
GetProcAddress
CloseHandle
GetStringTypeW
ExitProcess
user32
UpdateWindow
LoadIconA
LoadCursorA
ShowWindow
EndPaint
DrawTextA
GetClientRect
CreateWindowExA
PostQuitMessage
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
LoadStringA
EndDialog
AttachThreadInput
BringWindowToTop
RegisterClassExA
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
IsWindow
IsWindowVisible
IsRectEmpty
SetRect
UnregisterClassA
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
GetDC
FillRect
ReleaseDC
RegisterClassA
GetMessageA
gdi32
GetDIBits
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
Rectangle
SetROP2
GetObjectA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
VariantInit
pdh
PdhCollectQueryData
PdhGetCounterInfoA
PdhConnectMachineA
PdhGetDataSourceTimeRangeW
wininet
InternetOpenW
InternetCloseHandle
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 335KB - Virtual size: 715KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE