Static task
static1
Behavioral task
behavioral1
Sample
67942f92f061d123a45f42a0730c4b16.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
67942f92f061d123a45f42a0730c4b16.exe
Resource
win10v2004-20231215-en
General
-
Target
67942f92f061d123a45f42a0730c4b16
-
Size
187KB
-
MD5
67942f92f061d123a45f42a0730c4b16
-
SHA1
51a5d98697fc047f274897dd15a275dfa5f5a602
-
SHA256
1769e0c136e48cb8b94463a1ad8222496e9944e2092a911839dceb2691db67f6
-
SHA512
8fd42bca95ac970949e138d264792da912b6f921304c2c75e634c9389834f6aa31c14013b9553d8c3d1f5366168613feea8ab3a7f6a3c2d5fb6fb208da64044d
-
SSDEEP
3072:nG5vadtcsuBY+J/BP7nV6XM3OBUdtuQeKU7tlaNVwLuzHP0gw54kP:G8vcNPLVMM3YOlshWwLuDY5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67942f92f061d123a45f42a0730c4b16
Files
-
67942f92f061d123a45f42a0730c4b16.exe windows:4 windows x86 arch:x86
3db732ffa3dc1cfac73adc8e1ab50096
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
RaiseException
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapSize
ExitProcess
TerminateProcess
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
GetCommandLineA
FreeEnvironmentStringsA
GetStartupInfoA
lstrcmpiA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
LocalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleHandleA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
SetErrorMode
GlobalGetAtomNameA
GlobalAddAtomA
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
lstrcpyA
SizeofResource
GetVersionExA
GetProcessVersion
LoadLibraryA
GetProcAddress
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GetPrivateProfileIntA
DeleteCriticalSection
TlsAlloc
LCMapStringW
lstrcpynA
GlobalUnlock
GlobalLock
InitializeCriticalSection
LocalAlloc
GetLastError
MulDiv
FreeLibrary
SetLastError
lstrcmpA
GlobalAlloc
GlobalDeleteAtom
SetUnhandledExceptionFilter
GetCurrentThread
GetTickCount
VirtualAlloc
GetStringTypeA
LCMapStringA
GlobalFree
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
GetProfileStringA
lstrcatA
GetVersion
LockResource
LoadResource
FindResourceA
user32
SetCursor
MessageBoxA
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
ShowOwnedPopups
ReleaseDC
GetDC
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
LoadCursorA
GetSysColorBrush
FindWindowA
InvalidateRect
OffsetRect
CharUpperA
ReleaseCapture
WindowFromPoint
IntersectRect
InflateRect
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
LoadBitmapA
EqualRect
DeferWindowPos
CopyRect
GetMenuState
GetMenuCheckMarkDimensions
ScreenToClient
SetScrollInfo
ShowScrollBar
SetScrollRange
SetScrollPos
GetTopWindow
IsWindowEnabled
IsChild
GetParent
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
LoadStringA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
UpdateWindow
SetMenuItemBitmaps
LoadIconA
PeekMessageA
CheckMenuItem
EnableMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
EndDeferWindowPos
ModifyMenuA
IsWindowVisible
AdjustWindowRectEx
BeginDeferWindowPos
PostQuitMessage
PostMessageA
EnableWindow
SendMessageA
ScrollWindow
GetScrollPos
GetSysColor
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
gdi32
SetTextColor
GetObjectA
CreateBitmap
PatBlt
DeleteDC
RestoreDC
SelectObject
SaveDC
SetBkMode
GetStockObject
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
SetBkColor
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPointA
CreateDIBitmap
CreateCompatibleDC
ScaleViewportExtEx
BitBlt
SetViewportExtEx
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
shell32
DragFinish
DragQueryFileA
comctl32
ord17
ImageList_Destroy
wsock32
WSAGetLastError
WSAStartup
gethostbyname
WSACleanup
inet_ntoa
select
recvfrom
sendto
closesocket
socket
ioctlsocket
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ