Static task
static1
Behavioral task
behavioral1
Sample
16a964179a3d708afdf8f9d7357766eb7e7ccdb790e7d9981ab4d5ce68d3a334.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16a964179a3d708afdf8f9d7357766eb7e7ccdb790e7d9981ab4d5ce68d3a334.exe
Resource
win10v2004-20240412-en
General
-
Target
16a964179a3d708afdf8f9d7357766eb7e7ccdb790e7d9981ab4d5ce68d3a334
-
Size
31KB
-
MD5
7f8d47d581bd4be7e65c6380d37f8be3
-
SHA1
fc5784cba73c386fad4027759b0900c6cdc32240
-
SHA256
16a964179a3d708afdf8f9d7357766eb7e7ccdb790e7d9981ab4d5ce68d3a334
-
SHA512
024ee90ca38428c5f129225a8be84567ed29b96c6f2e7d5a2f24c3331cb67c66c28afacb54ef11cd71b6de907b369eaf53a07247d53514dc5ca042ee6e3da491
-
SSDEEP
384:tk2Wz6pL3a2a999999996cNyoYkytbdH4TIem29nm:K1z6pLxa999999996cgoYkytbdH4Uim
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16a964179a3d708afdf8f9d7357766eb7e7ccdb790e7d9981ab4d5ce68d3a334
Files
-
16a964179a3d708afdf8f9d7357766eb7e7ccdb790e7d9981ab4d5ce68d3a334.exe windows:4 windows x86 arch:x86
42c4dbd295c85503c861f4931dbd756d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetFocus
MessageBoxA
EndDialog
DispatchMessageW
SendMessageW
GetDlgItem
DialogBoxParamW
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
GetMessageW
GetDlgItemTextA
kernel32
GetModuleHandleW
HeapAlloc
GetProcessHeap
CloseHandle
HeapFree
GetVersionExW
ExitProcess
comctl32
ord17
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 862B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.htext Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE