Static task
static1
Behavioral task
behavioral1
Sample
67fcb1d029888556010a34025a81fcd3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
67fcb1d029888556010a34025a81fcd3.exe
Resource
win10v2004-20231215-en
General
-
Target
67fcb1d029888556010a34025a81fcd3
-
Size
332KB
-
MD5
67fcb1d029888556010a34025a81fcd3
-
SHA1
3306504b9778af393f3efb919895a2cc525cbdad
-
SHA256
3b6eb3db348aff9e45f56e4d3ce3cc08481937ea8e6f514fe7c01650d2f185de
-
SHA512
251165ee3556dc85e69441f9447760c6911cdf8f36524ca817d4b8aff1a7c6e6b14d23949b43ac46d6e574badb82295b702dc55558d6e3204896f8c83ab810db
-
SSDEEP
6144:xLq6jjAlr/QCLJcuxJlbGZztquDzJyupwZRmGBUQBMxxQXkk8/I:Fq6Alr1LJcuxJlKZ4uvUU44Gu5x//I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67fcb1d029888556010a34025a81fcd3
Files
-
67fcb1d029888556010a34025a81fcd3.exe windows:4 windows x86 arch:x86
11393f070645f61f517b92d4c3dee2f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
ImageList_Create
kernel32
CreateMutexA
HeapDestroy
TerminateProcess
EnumCalendarInfoExW
VirtualFree
InterlockedExchange
InterlockedDecrement
GetConsoleMode
GetEnvironmentStrings
GetFileAttributesW
SetLocaleInfoA
GetPrivateProfileSectionNamesW
GetProcAddress
WriteProfileStringW
GetPrivateProfileSectionA
WriteConsoleOutputA
SetStdHandle
MultiByteToWideChar
LocalFree
IsBadWritePtr
InitializeCriticalSection
GetLogicalDriveStringsW
GetEnvironmentStringsA
SetConsoleMode
GetVersion
FindNextFileW
CreateDirectoryA
InterlockedExchangeAdd
EnumDateFormatsExA
HeapAlloc
LCMapStringA
GetACP
GetCommandLineA
DebugBreak
DeleteCriticalSection
FoldStringW
FreeEnvironmentStringsA
SetLocalTime
WriteFile
TlsSetValue
GetCurrentProcess
CreateFileMappingW
LeaveCriticalSection
ReadConsoleInputW
MoveFileA
GetEnvironmentVariableA
WritePrivateProfileSectionW
WaitForDebugEvent
CompareStringA
FillConsoleOutputCharacterW
ExpandEnvironmentStringsA
InterlockedIncrement
GetSystemTimeAsFileTime
FindResourceExW
VirtualAlloc
WideCharToMultiByte
SetHandleCount
TlsFree
ExitProcess
GetSystemTime
CompareStringW
GetStartupInfoA
SetConsoleCursorInfo
GetCurrentThreadId
OpenSemaphoreA
WriteConsoleOutputCharacterA
IsDebuggerPresent
GetPrivateProfileSectionNamesA
EnterCriticalSection
HeapCreate
CreateMutexW
GlobalFix
UnhandledExceptionFilter
GetLocalTime
GetProcessAffinityMask
lstrcat
GetFileType
ReadFile
Sleep
GetConsoleCursorInfo
HeapFree
EnumCalendarInfoW
GetCPInfo
UnlockFileEx
TlsGetValue
GetConsoleScreenBufferInfo
GetNumberFormatA
GetStringTypeW
LoadLibraryA
GetComputerNameW
OpenMutexA
GetCurrentProcessId
QueryPerformanceCounter
LCMapStringW
EnumTimeFormatsA
GetOEMCP
GetTickCount
RtlUnwind
GetCommandLineW
HeapReAlloc
FreeEnvironmentStringsW
GetLastError
LocalFileTimeToFileTime
GetExitCodeProcess
SetLastError
RemoveDirectoryA
SetEnvironmentVariableA
GetEnvironmentStringsW
SetFilePointer
GetTimeZoneInformation
CreateWaitableTimerW
VirtualQuery
VirtualUnlock
FindAtomA
GetModuleHandleA
FlushFileBuffers
GetModuleFileNameA
SetSystemTime
FlushInstructionCache
TlsAlloc
FindFirstFileExA
CloseHandle
GetStringTypeA
GetAtomNameW
GetNamedPipeHandleStateW
GetCurrentThread
GetStdHandle
user32
ShowCursor
EnumDisplaySettingsA
SetSysColors
RegisterWindowMessageA
BeginPaint
GetMessagePos
GetClassInfoExW
SetMenu
DestroyCursor
GetDesktopWindow
PaintDesktop
PostQuitMessage
CopyAcceleratorTableW
CharLowerA
MsgWaitForMultipleObjects
GetMenuItemRect
AnyPopup
DestroyWindow
GetClipboardOwner
DrawStateW
MonitorFromWindow
LoadCursorFromFileW
FreeDDElParam
DefWindowProcW
InsertMenuItemW
ValidateRect
RegisterClassExA
GetDCEx
CloseDesktop
RegisterClassA
MessageBoxW
EnumDisplaySettingsExA
EqualRect
LoadIconW
ShowWindow
CreateWindowExA
SetScrollPos
wininet
FtpOpenFileW
GopherGetAttributeA
DeleteUrlCacheContainerA
InternetAlgIdToStringW
InternetQueryDataAvailable
InternetTimeFromSystemTimeW
InternetAutodial
HttpQueryInfoW
comdlg32
ReplaceTextA
GetOpenFileNameA
gdi32
SwapBuffers
AngleArc
GetTextExtentExPointA
GetBitmapBits
SetPixelV
ScaleWindowExtEx
FrameRgn
EnumFontFamiliesExA
GetLayout
AddFontResourceW
Escape
ColorCorrectPalette
RectInRegion
advapi32
LookupPrivilegeDisplayNameA
RegQueryMultipleValuesA
RegQueryValueExW
CreateServiceW
CryptHashSessionKey
CryptDuplicateKey
RegLoadKeyW
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ