Static task
static1
Behavioral task
behavioral1
Sample
1b0fc5e10e9b97dc9b33faa082448a20.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b0fc5e10e9b97dc9b33faa082448a20.exe
Resource
win10v2004-20231215-en
General
-
Target
1b0fc5e10e9b97dc9b33faa082448a20
-
Size
44KB
-
MD5
1b0fc5e10e9b97dc9b33faa082448a20
-
SHA1
9e5746988de372d80d1a9c62c34cf17d183317f1
-
SHA256
d54d9311d6cb7e2b9bbd4474f6db9cf63bbb9fa7f938577a3cd7d27013b930c0
-
SHA512
beecb496f9ee8956d47e2fb055b52e267e0e56333c57fe4a806acc5cde3f9cb72fd564b34d68f7c601cafb24f362e897a19e44dd8ee6f0fef13acbef0f601772
-
SSDEEP
768:nu7blnol78K/cz/oqm9cx0BuF/dkUxNcOKH4nnNZ3xMAx:ablolYK0joqm9UF1kUxNLKYz3qA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b0fc5e10e9b97dc9b33faa082448a20
Files
-
1b0fc5e10e9b97dc9b33faa082448a20.exe windows:4 windows x86 arch:x86
22b09ed7c3612ecad8d15ed29f2ecc30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
AddFontResourceW
ClearBrushAttributes
AddFontResourceExA
ClearBitmapAttributes
AddFontMemResourceEx
CreateSolidBrush
GetCurrentPositionEx
GetBrushOrgEx
AddFontResourceA
DeleteObject
GetBitmapBits
GetDCOrgEx
AddFontResourceExW
GetPixel
AbortPath
ExcludeClipRect
CloseMetaFile
DeleteDC
CopyMetaFileA
comctl32
ImageList_DragMove
ImageList_Merge
ImageList_Draw
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_DragLeave
ImageList_LoadImageW
ImageList_AddMasked
ImageList_DragShowNolock
ImageList_DrawIndirect
ImageList_LoadImage
ImageList_ReplaceIcon
InitCommonControls
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_Copy
ImageList_GetImageRect
ImageList_LoadImageA
ImageList_Create
ImageList_GetIcon
ImageList_DrawEx
ImageList_EndDrag
ImageList_DragEnter
ImageList_BeginDrag
ImageList_Draw
ImageList_GetImageRect
ImageList_AddIcon
ImageList_Copy
ImageList_LoadImage
ImageList_Remove
ImageList_DragLeave
ImageList_LoadImageA
ImageList_Copy
ImageList_GetImageCount
ImageList_DrawIndirect
ImageList_GetIconSize
ImageList_AddIcon
ImageList_GetImageInfo
ImageList_LoadImage
ImageList_DragShowNolock
ImageList_Destroy
ImageList_GetDragImage
ImageList_GetIcon
user32
DialogBoxParamW
GetWindowTextA
CopyRect
GetCursor
DialogBoxParamA
DrawIcon
GetDlgItem
BlockInput
DrawTextA
LoadCursorA
IsMenu
AlignRects
GetMenu
DialogBoxParamA
GetDC
DrawTextA
GetWindowTextLengthA
AlignRects
CloseWindow
DrawIcon
CopyImage
CreateIcon
BlockInput
DrawTextW
InsertMenuA
IsWindow
AppendMenuA
IsMenu
DialogBoxParamA
CopyImage
EndDialog
CopyRect
GetWindowTextLengthA
DrawTextW
AlignRects
InsertMenuA
CloseWindow
DrawIconEx
DrawIcon
AppendMenuA
CreateIcon
LoadMenuA
GetCursor
BlockInput
EndDialog
CopyIcon
CalcMenuBar
CopyImage
InsertMenuA
AppendMenuA
BlockInput
GetMenu
CopyRect
AppendMenuW
GetWindowTextLengthA
GetWindowTextA
GetCursor
DrawTextW
DrawIconEx
LoadCursorA
DialogBoxParamW
advapi32
RegDeleteKeyW
RegEnumValueW
RegEnumKeyW
RegCreateKeyExW
RegDeleteValueA
RegQueryValueExA
RegLoadKeyA
RegDeleteValueW
RegOpenKeyExW
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyW
RegQueryValueW
RegQueryValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyW
RegOpenKeyExA
RegGetKeySecurity
RegQueryValueW
RegEnumValueA
RegReplaceKeyW
RegQueryValueExW
RegEnumValueW
RegCreateKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyExW
RegLoadKeyA
RegCreateKeyW
RegFlushKey
RegDeleteKeyA
RegEnumKeyA
RegEnumValueW
RegDeleteValueW
RegOpenKeyW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 865B
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ