Static task
static1
Behavioral task
behavioral1
Sample
16e1b62665d63b77d6f2f4a1226ff8b3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16e1b62665d63b77d6f2f4a1226ff8b3.exe
Resource
win10v2004-20231215-en
General
-
Target
16e1b62665d63b77d6f2f4a1226ff8b3
-
Size
626KB
-
MD5
16e1b62665d63b77d6f2f4a1226ff8b3
-
SHA1
7e33f0f9c2dc55ce04bd3e91fdbf17b4234236db
-
SHA256
ce7372f56dab4ae082f52b13c3b43a55b588470ad395ef5a115a17ffab2c77a6
-
SHA512
b8324aaab1e4050e88f9e62f89273f609ce4ed8da96906f408b923ce8d0028b667d42945d21bd2b656a83acbba4ad60677af8917c96eaeed12926edaa346ad55
-
SSDEEP
12288:x81pobpyErNl+FQTD/GsIek9M5NoDyxzf/pQOQr:uKpyEZ8FKSsIeaMHoKN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16e1b62665d63b77d6f2f4a1226ff8b3
Files
-
16e1b62665d63b77d6f2f4a1226ff8b3.exe windows:4 windows x86 arch:x86
c2fda27c5147e240a97c1a0de45aa112
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
FindTextA
comctl32
DrawStatusTextW
InitCommonControlsEx
ImageList_SetDragCursorImage
user32
TabbedTextOutW
MapDialogRect
DispatchMessageW
LoadBitmapW
GetWindowContextHelpId
GetListBoxInfo
GetMenuItemCount
DestroyWindow
DrawTextA
SetScrollRange
PackDDElParam
GetMonitorInfoA
RegisterClassExA
IsDlgButtonChecked
IsCharAlphaNumericW
GetGuiResources
MessageBoxIndirectW
RegisterClassA
GetKeyNameTextW
CreateDialogIndirectParamW
AppendMenuA
GetSysColor
InsertMenuItemW
CloseWindowStation
SetPropA
DeferWindowPos
ModifyMenuA
SetDlgItemTextA
HideCaret
kernel32
GetTimeZoneInformation
GetStringTypeA
HeapCreate
EnterCriticalSection
ReadConsoleOutputW
HeapReAlloc
GetSystemInfo
GetVersionExW
OpenMutexA
InterlockedExchange
GetStartupInfoW
GetModuleFileNameW
FreeEnvironmentStringsW
IsValidLocale
SetStdHandle
LoadLibraryA
SetHandleCount
VirtualAlloc
InitializeCriticalSection
GetVersionExA
IsValidCodePage
GetStdHandle
GetTimeFormatA
FlushViewOfFile
HeapValidate
SetConsoleCtrlHandler
RtlUnwind
GetStringTypeW
GetLastError
TerminateProcess
TlsSetValue
GetProcessHeaps
GetOEMCP
GetExitCodeThread
GetSystemTimeAsFileTime
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
CompareStringW
GetLocaleInfoA
SetConsoleScreenBufferSize
HeapDestroy
SetFilePointer
GetCommandLineW
TlsGetValue
TlsFree
GetACP
QueryPerformanceCounter
GetCurrentThreadId
GetLocaleInfoW
GetTickCount
GetDateFormatA
EnumSystemLocalesA
GetModuleFileNameA
ReadFile
CompareStringA
IsBadWritePtr
GetCPInfo
LCMapStringA
GetModuleHandleA
WriteConsoleOutputCharacterA
OutputDebugStringA
GetFileType
HeapFree
GetCommandLineA
InterlockedIncrement
CreateMutexA
MultiByteToWideChar
GetCurrentProcessId
DuplicateHandle
GetStartupInfoA
UnhandledExceptionFilter
VirtualQuery
VirtualFree
InterlockedDecrement
SetLastError
IsBadReadPtr
FreeEnvironmentStringsA
GetUserDefaultLCID
CloseHandle
LeaveCriticalSection
HeapAlloc
FlushFileBuffers
WriteFile
ExitProcess
GetCurrentDirectoryW
DebugBreak
TlsAlloc
EnumCalendarInfoExW
GetCurrentProcess
LCMapStringW
SetEnvironmentVariableA
VirtualProtect
DeleteCriticalSection
GetProcAddress
GetCurrentThread
wininet
InternetGetConnectedStateEx
SetUrlCacheConfigInfoA
InternetCanonicalizeUrlW
InternetReadFileExW
FindCloseUrlCache
Sections
.text Size: 198KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 255KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ