Static task
static1
Behavioral task
behavioral1
Sample
af19428f20f153b9c698081ee21e8288367fd6fc1151a62125fd2300fe168543.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
af19428f20f153b9c698081ee21e8288367fd6fc1151a62125fd2300fe168543.exe
Resource
win10v2004-20231215-en
General
-
Target
af19428f20f153b9c698081ee21e8288367fd6fc1151a62125fd2300fe168543
-
Size
154KB
-
MD5
16ed5985f9a0dc976a61e89dd7859eb2
-
SHA1
d093347a855638acfc918de606f997353eb46037
-
SHA256
af19428f20f153b9c698081ee21e8288367fd6fc1151a62125fd2300fe168543
-
SHA512
a2958cb747730b17ec3a9d68295a2485468d6de2f57feda82ad1de8d965c9ff5bc3e19831ffd240a34edd289fc5c6bfa88ac2bb70195acdf2e08455576d88439
-
SSDEEP
3072:+VbwSqv3Xa+SVe4sULUgueNUTs/glCLQ3mhcfxggjcoEGzI:IwSqPK+QeRqDrTywQ2hcfxgjojzI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af19428f20f153b9c698081ee21e8288367fd6fc1151a62125fd2300fe168543
Files
-
af19428f20f153b9c698081ee21e8288367fd6fc1151a62125fd2300fe168543.exe windows:1 windows x86 arch:x86
a49d6f7f863223661bb1a0a572a10187
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsW
user32
DrawAnimatedRects
FindWindowA
GetWindowTextA
KillTimer
SetFocus
SetTimer
GetWindowRect
ole32
CoInitialize
CoUninitialize
ws2_32
WSACleanup
WSAStartup
kernel32
CloseHandle
CreateEventW
CreateFileA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
lstrcpyW
lstrlenA
iphlpapi
GetAdaptersInfo
ntdll
RtlNtStatusToDosError
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
gdi32
DeleteObject
SelectObject
SetTextColor
CreateFontIndirectA
Sections
AUTO Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 115KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ