Static task
static1
Behavioral task
behavioral1
Sample
16f706666699180a7dd976cff8981266.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16f706666699180a7dd976cff8981266.exe
Resource
win10v2004-20231222-en
General
-
Target
16f706666699180a7dd976cff8981266
-
Size
748KB
-
MD5
16f706666699180a7dd976cff8981266
-
SHA1
b2597ef068977589802b54fed8cb180cf9e9eb39
-
SHA256
25afb99e3be13a06547ad0a4ecf2b0563286bc05f0093f6867e5ef7c3c3e8d9e
-
SHA512
be2b70508169fb90a97915376d98162b68cb53b92cc5b5be6aa4c6e1e064351bae4465276288d19e58f7c371baedf151e489b24533cbfdb03e6d379fd10f58a9
-
SSDEEP
12288:Q/F84BEPhw3ILY23whCvzvF3EqmGttKwnS/rbKoawu0lyGaPR1F0:i84FQYZ0LF3EqjKwnS2wueX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16f706666699180a7dd976cff8981266
Files
-
16f706666699180a7dd976cff8981266.exe windows:4 windows x86 arch:x86
d4caffc5f3c9baff05bb3413b80287e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
SHGetFileInfoA
advapi32
LookupPrivilegeValueA
DeleteService
RegEnumKeyA
FreeSid
comctl32
ImageList_ReplaceIcon
ord17
ImageList_Create
ImageList_GetImageCount
_TrackMouseEvent
ImageList_LoadImageW
ImageList_AddMasked
ImageList_Draw
DestroyPropertySheetPage
ImageList_GetIcon
CreatePropertySheetPageW
InitCommonControlsEx
comdlg32
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
urlmon
URLDownloadToFileA
user32
EndPaint
IsChild
DeleteMenu
DestroyMenu
CheckMenuItem
LoadImageA
ClientToScreen
SystemParametersInfoA
GetClassInfoExA
DrawFrameControl
CallWindowProcA
GetSysColorBrush
InvalidateRect
TranslateAcceleratorA
GetDCEx
SetParent
LoadStringA
CreatePopupMenu
SetWindowLongA
MessageBoxA
DrawEdge
RegisterClassA
SetClipboardData
SetWindowPos
IsWindow
UnionRect
CharNextA
SetCapture
AppendMenuA
MapWindowPoints
RegisterWindowMessageA
GetPropA
OpenClipboard
LoadAcceleratorsA
GetCursorPos
GetSystemMetrics
DestroyWindow
HideCaret
GetWindowRect
FillRect
RemoveMenu
CopyImage
RegisterClipboardFormatA
ReleaseCapture
GetFocus
GetMessageTime
CreateWindowExA
PostMessageA
GetWindowDC
RemovePropA
DrawIcon
InflateRect
GetMenuCheckMarkDimensions
GetClassInfoA
ShowCaret
SetMenuItemBitmaps
EmptyClipboard
SetCursor
GetSystemMenu
CreateCaret
DestroyCursor
GetMenuItemInfoA
DrawFocusRect
IsWindowVisible
GetLastActivePopup
ReleaseDC
CheckDlgButton
GetWindowLongA
EnableMenuItem
BeginDeferWindowPos
ScreenToClient
LoadCursorA
GetSubMenu
OffsetRect
CharUpperA
GetTabbedTextExtentA
GetParent
GetKeyState
GetClientRect
GetMenuItemCount
EndDialog
CallNextHookEx
IsZoomed
EndDeferWindowPos
DrawTextExA
SetPropA
PostQuitMessage
CreateDialogIndirectParamA
MsgWaitForMultipleObjects
BringWindowToTop
FindWindowA
UpdateWindow
GetWindowThreadProcessId
TranslateMessage
UnregisterClassA
LoadIconA
SendDlgItemMessageA
KillTimer
PeekMessageA
UnhookWindowsHookEx
GetWindow
ScrollWindow
TrackPopupMenu
GetMenuItemID
GetDlgItem
WindowFromPoint
ValidateRect
CopyIcon
GetDC
InsertMenuA
DrawTextA
SetRectEmpty
LoadMenuA
CharUpperBuffA
WaitMessage
SetDlgItemInt
DestroyCaret
SetScrollInfo
TabbedTextOutA
IsIconic
DefWindowProcA
BeginPaint
GetActiveWindow
EnableWindow
GetScrollRange
WinHelpA
ShowWindow
DrawStateA
MoveWindow
SetTimer
GetSysColor
PtInRect
LoadBitmapA
GetIconInfo
SetForegroundWindow
SetMenu
DispatchMessageA
IsWindowEnabled
GetMessagePos
GetDesktopWindow
MapDialogRect
DestroyIcon
SetRect
GetScrollPos
FrameRect
RegisterClassExA
CloseClipboard
CopyRect
GetWindowTextLengthA
GetCapture
GetAsyncKeyState
GetMenuState
SetFocus
GetClassLongA
kernel32
LoadResource
GlobalSize
TlsGetValue
WriteFile
VirtualAlloc
GetSystemTime
GetCommandLineA
CreateFileMappingA
GetModuleFileNameA
GetModuleFileNameW
SetStdHandle
UnhandledExceptionFilter
FlushFileBuffers
WideCharToMultiByte
SetLastError
GetCurrentProcess
CompareStringA
HeapAlloc
SystemTimeToFileTime
SetEnvironmentVariableA
FileTimeToLocalFileTime
MoveFileA
CreateThread
CompareStringW
GetOEMCP
LCMapStringW
HeapReAlloc
GetStringTypeW
DeleteFileA
QueryPerformanceCounter
GetLastError
lstrlenA
SetFilePointer
FreeLibrary
LoadLibraryA
FindFirstFileA
GetModuleHandleA
SizeofResource
VirtualQuery
RtlUnwind
FreeEnvironmentStringsA
InitializeCriticalSection
GlobalHandle
SetErrorMode
IsBadReadPtr
SetEvent
GetFileAttributesA
HeapSize
GetEnvironmentStrings
MulDiv
GetTimeZoneInformation
HeapCreate
GetCurrentProcessId
OpenMutexA
VirtualFree
GetEnvironmentStringsW
GetPrivateProfileStringA
GetExitCodeThread
HeapFree
IsBadCodePtr
ExitThread
FindNextFileA
ReleaseMutex
OutputDebugStringA
SuspendThread
ReadFile
CloseHandle
GetStartupInfoA
InterlockedDecrement
GetCPInfo
GetCurrentThreadId
GetSystemDirectoryA
GetDateFormatA
GetACP
TlsAlloc
InterlockedExchange
LeaveCriticalSection
EnumSystemLocalesA
MultiByteToWideChar
RaiseException
TerminateProcess
GetProcAddress
GetFileType
GlobalAlloc
TerminateThread
DeleteCriticalSection
QueryPerformanceFrequency
SetUnhandledExceptionFilter
GetVersion
GetStdHandle
CreateEventA
ExitProcess
GetSystemTimeAsFileTime
HeapDestroy
EnterCriticalSection
GetTickCount
SetThreadPriority
GetPrivateProfileIntA
TlsSetValue
GetLocalTime
CreateMutexA
FreeEnvironmentStringsW
InterlockedIncrement
LCMapStringA
SetConsoleCtrlHandler
GetStringTypeA
lstrcmpiA
GetCurrentThread
FileTimeToSystemTime
SetHandleCount
gdi32
GetTextColor
CreatePatternBrush
SetViewportOrgEx
SelectClipRgn
CreateDIBSection
Ellipse
MoveToEx
GetTextExtentPointA
RectInRegion
CreateRectRgnIndirect
StretchDIBits
TextOutW
SetWindowOrgEx
GetStockObject
OffsetClipRgn
GetPixel
PolyBezier
CreateBitmap
SetBrushOrgEx
SelectPalette
SetTextAlign
CreateFontIndirectA
SetROP2
SelectObject
SetTextColor
GetBkColor
SetAbortProc
Polygon
RealizePalette
OffsetWindowOrgEx
GetWindowExtEx
PatBlt
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 460KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ