Static task
static1
Behavioral task
behavioral1
Sample
02c16c906db215e128431bdf759c4bfda9cd2dc38c07504a5b00f0eb63fbc277.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02c16c906db215e128431bdf759c4bfda9cd2dc38c07504a5b00f0eb63fbc277.exe
Resource
win10v2004-20240426-en
General
-
Target
02c16c906db215e128431bdf759c4bfda9cd2dc38c07504a5b00f0eb63fbc277
-
Size
250KB
-
MD5
96cc508a8c55664c6269d698f7f947a8
-
SHA1
044952f15fd1222aaf65a50e4d80cb73d257f612
-
SHA256
02c16c906db215e128431bdf759c4bfda9cd2dc38c07504a5b00f0eb63fbc277
-
SHA512
70fe754879ba848367153dd3d9c6405a7d6314f5e1b2656a4d0d8a6dae075403f757261b92ce93c9c26682aa0d41d4ad4bcc5fea272b3c3dcda253dd37b54eda
-
SSDEEP
6144:voM+CksUxveAJGEOfqahMjmZu008gjoB7W:R+aktJGzriM05jo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02c16c906db215e128431bdf759c4bfda9cd2dc38c07504a5b00f0eb63fbc277
Files
-
02c16c906db215e128431bdf759c4bfda9cd2dc38c07504a5b00f0eb63fbc277.exe windows:4 windows x86 arch:x86
c8582b062f74cf7b3285a9ac68c283c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatW
LoadLibraryA
VirtualProtectEx
GetConsoleAliasExesLengthW
FindNextVolumeMountPointW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EncodePointer
GetModuleFileNameW
GetStdHandle
WriteFile
HeapCreate
RaiseException
GetStartupInfoW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
HeapReAlloc
LCMapStringW
GetStringTypeW
lstrcpyA
LocalFree
HeapAlloc
GlobalFree
GetProcAddress
lstrcmpiA
GetLastError
GlobalUnlock
lstrlenW
MultiByteToWideChar
ExitThread
CreateEventA
Sleep
LoadLibraryW
GlobalAlloc
GetProcessHeap
GetTickCount
GetModuleHandleW
GlobalLock
HeapSetInformation
GetCommandLineA
DecodePointer
ExitProcess
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDriverInstallParamsW
SetupDiOpenClassRegKeyExA
SetupDiSetSelectedDriverW
SetupFindFirstLineW
SetupGetLineCountW
SetupIterateCabinetW
SetupQuerySourceListW
SetupQueueDeleteSectionW
user32
SetDlgItemTextA
GetMessageA
GetClassNameA
SetTimer
GetWindowRect
RegisterClassExA
TrackPopupMenu
IsClipboardFormatAvailable
GetParent
LoadMenuA
LoadIconA
GetClientRect
CreateMenu
SetFocus
SendMessageA
GetDlgItemTextA
GetDC
TranslateMessage
LockWindowUpdate
InsertMenuItemW
CreateWindowExA
GetDCEx
ReleaseDC
EnableMenuItem
GetDlgItem
EndDialog
DefWindowProcA
GetDesktopWindow
GetSysColor
LoadStringW
ShowWindow
CreatePopupMenu
GetSysColorBrush
AppendMenuA
IsWindow
CreateWindowExW
DispatchMessageA
GetSystemMetrics
SendMessageW
ole32
CoCreateInstance
Sections
.text Size: 256B - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ