Static task
static1
Behavioral task
behavioral1
Sample
2ac398c51fb0a4fecce3838610d48b7cc4959e89884a3512c15b38cba080f067.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2ac398c51fb0a4fecce3838610d48b7cc4959e89884a3512c15b38cba080f067.exe
Resource
win10v2004-20230221-en
General
-
Target
2ac398c51fb0a4fecce3838610d48b7cc4959e89884a3512c15b38cba080f067
-
Size
640KB
-
MD5
d724f49b8f6ff186f9c1e23d7a47a769
-
SHA1
196a916e89f7107b42810fc77e3d280c79e1790b
-
SHA256
2ac398c51fb0a4fecce3838610d48b7cc4959e89884a3512c15b38cba080f067
-
SHA512
b97af16295d92a97456f64a60398ad10a8223d086af21a3e98de0298d8fd81b4ac99052ec6318065c534d222f8593ccb901768364c5a2a58986c50f665c5d8b3
-
SSDEEP
12288:hBtVPXE9MHSoTQLgXbQvKHzg04oUkNTBdq2GiNwJTQdxcn:hBtVPXE9MHDNUKHs0VTBdrRNw+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ac398c51fb0a4fecce3838610d48b7cc4959e89884a3512c15b38cba080f067
Files
-
2ac398c51fb0a4fecce3838610d48b7cc4959e89884a3512c15b38cba080f067.exe windows x86
415b98cdd794732a4e35aa97bce146a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
LoadResource
lstrcmpiW
Sleep
ReadFile
SetFilePointer
LockResource
GetVersionExW
GetModuleHandleW
CreateProcessW
LocalFree
WaitForSingleObject
GetCurrentProcess
GetACP
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
SetEndOfFile
GetLongPathNameW
ReleaseMutex
CreateDirectoryW
GetFullPathNameW
SetFileAttributesW
DeleteFileW
GetFileSizeEx
FormatMessageW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
GetLocalTime
FindFirstFileW
FindNextFileW
FindResourceW
InitializeCriticalSection
FindClose
GetFileAttributesExW
ExpandEnvironmentStringsW
WideCharToMultiByte
GetFileAttributesW
lstrlenW
GetTickCount
InterlockedExchangeAdd
InterlockedExchange
GetCurrentProcessId
HeapAlloc
VirtualQuery
GetLogicalDriveStringsW
GetEnvironmentVariableW
GetModuleFileNameW
QueryDosDeviceW
WriteFile
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentThreadId
MapViewOfFile
CreateFileMappingW
GetFileSize
CloseHandle
UnmapViewOfFile
CreateFileW
GetProcessHeap
DeleteCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
HeapFree
OpenProcess
CreateMutexW
user32
SetWindowPos
GetFocus
GetActiveWindow
GetSystemMetrics
DefWindowProcW
GetParent
GetDesktopWindow
GetClassNameW
SetFocus
GetForegroundWindow
GetWindowRect
GetWindowThreadProcessId
LoadIconW
AttachThreadInput
WindowFromPoint
GetShellWindow
ole32
OleInitialize
OleUninitialize
msvcp140
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xbad_alloc@std@@YAXXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
2345miniui
?OnMouseLeaveDialog@RCMiniUIDialogView@RC@@UAEXXZ
?OnFirstLayouted@RCMiniUIDialogView@RC@@UAEXXZ
?OnDropFiles@RCMiniUIDialogView@RC@@UAEXABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?OnMouseEnterDialog@RCMiniUIDialogView@RC@@UAEXXZ
?OnAnimateShowEnded@RCMiniUIDialogView@RC@@UAEXXZ
?OnAnimateHideEnded@RCMiniUIDialogView@RC@@UAEXXZ
?OnDialogSkinChanged@RCMiniUIDialogView@RC@@UAEXXZ
?ProcessWindowMessage@RCMiniUIDialog@RC@@UAEHPAUHWND__@@IIJAAJK@Z
?OnFinalMessage@?$CDialogImplBaseT@VRCMiniAtlWindow@@@ATL@@UAEXPAUHWND__@@@Z
?GetDialogProc@?$CDialogImplBaseT@VRCMiniAtlWindow@@@ATL@@UAEP6GHPAUHWND__@@IIJ@ZXZ
?EndDialog@?$CDialogImpl@VRCMiniUIDialog@RC@@VRCMiniAtlWindow@@@ATL@@QAEHH@Z
?SetIcon@RCMiniAtlWindow@@QAEPAUHICON__@@PAU2@H@Z
??0RCMiniUIDialog@RC@@QAE@I@Z
??1RCMiniUIDialog@RC@@UAE@XZ
?GetHWND@RCMiniUIDialog@RC@@UAEPAUHWND__@@XZ
?WindowDefKeyPressed@RCMiniUIDialog@RC@@EAE_NIII@Z
?GetRootView@RCMiniUIDialogView@RC@@UAEPAVRCMiniUIView@2@XZ
?GetToolTip@RCMiniUIDialogView@RC@@UAEAAV?$CToolTipCtrlT@VCWindow@ATL@@@WTL@@XZ
?OnMouseMoveInDialog@RCMiniUIDialogView@RC@@UAEXABVCPoint@WTL@@I@Z
?OnDialogTimer@RCMiniUIDialogView@RC@@UAE_NIPAX@Z
?SetItemText@RCMiniUIDialogView@RC@@QAE_NIABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetItemAttribute@RCMiniUIDialogView@RC@@QAE_NIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetViewByID@RCMiniUIDialogView@RC@@QBEPAVRCMiniUIView@2@H@Z
?IsChecked@RCMiniUiImgChkBox@RC@@QAE_NXZ
?ReflectNotifications@?$CWindowImplRoot@VRCMiniAtlWindow@@@ATL@@QAEJIIJAAH@Z
?DoModal@RCMiniUIDialog@RC@@QAEHPAUHWND__@@J@Z
?OnEnter@RCMiniUIDialogView@RC@@UAEXXZ
?OnEsc@RCMiniUIDialogView@RC@@UAEXXZ
?GetGlobalSkinPool@RCMiniUIManner@RC@@SAPAVRCMiniUISkinPoolInterface@2@XZ
?GetGlobalStylePool@RCMiniUIManner@RC@@SAPAVRCMiniUIStylePoolInterface@2@XZ
?SetRenderFactory@RCMiniUIAppModule@RC@@QAE_NPAVRCMiniUIRenderFactory@2@@Z
?Term@RCMiniUIAppModule@RC@@QAEXXZ
?Init@RCMiniUIAppModule@RC@@QAEXPAUHINSTANCE__@@@Z
?Instance@RCMiniUIAppModule@RC@@SAAAV12@XZ
?InitRuntimeObject@RCMiniUIObjectFactory@RC@@SAXXZ
?GetGolobalStringPool@RCMiniUIResourceManager@RC@@SAPAVRCMiniUIStringPoolInterface@2@XZ
?GetGolobalFontPool@RCMiniUIResourceManager@RC@@SAPAVRCMiniUIFontPoolInterface@2@XZ
?CreateBitmap@RCMiniUIRenderFactorySkia@RC@@UAEPAVRCMiniUIBitmap@2@XZ
?CreateCanvas@RCMiniUIRenderFactorySkia@RC@@UAEPAVRCMiniUICanvas@2@HH_N@Z
?Initialize@RCMiniUIRenderFactorySkia@RC@@UAE_NXZ
??1RCMiniUIRenderFactorySkia@RC@@UAE@XZ
??0RCMiniUIRenderFactorySkia@RC@@QAE@XZ
?BeforeWindowDestroy@RCMiniUIDialogView@RC@@UAEXXZ
comctl32
InitCommonControlsEx
vcruntime140
_CxxThrowException
_except_handler4_common
_purecall
strstr
__std_exception_copy
__CxxFrameHandler3
wcsstr
memmove
memcpy
wcschr
wcsrchr
__RTDynamicCast
memchr
memset
__std_exception_destroy
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
malloc
calloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo
_errno
terminate
_invalid_parameter_noinfo_noreturn
_controlfp_s
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_register_onexit_function
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
rewind
__stdio_common_vsprintf_s
fwrite
fread
__stdio_common_vswprintf
fclose
_wfopen_s
fseek
__stdio_common_vsprintf
ftell
api-ms-win-crt-convert-l1-1-0
_wtoi
atoi
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-time-l1-1-0
_localtime64
_time64
api-ms-win-crt-string-l1-1-0
_wcsnicmp
isalnum
towupper
_stricmp
towlower
wcsncpy
_wcsicmp
api-ms-win-crt-filesystem-l1-1-0
_splitpath_s
api-ms-win-crt-math-l1-1-0
modf
_dtest
__setusermatherr
_except1
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ