Static task
static1
Behavioral task
behavioral1
Sample
0aaa9ac43c2df8ad6ffce19dadf8d33b0fc3d1a591c0d9293a21a7b9f5650339.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0aaa9ac43c2df8ad6ffce19dadf8d33b0fc3d1a591c0d9293a21a7b9f5650339.exe
Resource
win10v2004-20230220-en
General
-
Target
0aaa9ac43c2df8ad6ffce19dadf8d33b0fc3d1a591c0d9293a21a7b9f5650339
-
Size
156KB
-
MD5
3ce814d691494f1ba7bddbb025627fde
-
SHA1
f8e6fa89bfc35fd3deb3c4c256c85a0406406128
-
SHA256
0aaa9ac43c2df8ad6ffce19dadf8d33b0fc3d1a591c0d9293a21a7b9f5650339
-
SHA512
5b35e09da54cad7f2edf8cae4e73680671e7da481117729a88503c1a27db2b1392d5bb90b8251a2e50b98d67e13a0da01b84d64d98eff0a37a92b521ad7124e2
-
SSDEEP
3072:EAZbLLERobUe+tIa4BNBBJBBCJBBuBB+BBB9s:E6bXIoU4BNBBJBBCJBBuBB+BBB9s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aaa9ac43c2df8ad6ffce19dadf8d33b0fc3d1a591c0d9293a21a7b9f5650339
Files
-
0aaa9ac43c2df8ad6ffce19dadf8d33b0fc3d1a591c0d9293a21a7b9f5650339.exe windows x86
f5d0102f52933efea0696795c7e6f607
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
CloseHandle
CreateFileA
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
Sleep
WritePrivateProfileStringW
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
InterlockedDecrement
GetCurrentThreadId
SetLastError
GetProcAddress
GetPrivateProfileIntW
LoadLibraryW
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetModuleFileNameW
GetPrivateProfileStringW
IsValidCodePage
FreeLibrary
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
GetLocalTime
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
user32
LoadImageW
MoveWindow
GetClientRect
ShowWindow
SendMessageW
CheckDlgButton
SetFocus
MapWindowPoints
PostMessageW
UpdateWindow
LoadBitmapW
EnableWindow
GetWindowTextW
DispatchMessageW
SystemParametersInfoW
CreateDialogParamW
GetSubMenu
DestroyMenu
SetWindowTextW
TranslateMessage
DestroyIcon
SetForegroundWindow
GetDlgItem
CreateWindowExW
GetForegroundWindow
SetWindowLongW
DialogBoxParamW
EndDialog
SetWindowsHookExW
AttachThreadInput
UnhookWindowsHookEx
GetWindowRect
MessageBoxW
LoadCursorW
CallWindowProcW
LoadIconW
RegisterClassW
DefWindowProcW
GetSysColor
GetSystemMetrics
CallNextHookEx
GetMessageW
IsWindowVisible
SetWindowPos
PostQuitMessage
TrackPopupMenuEx
IsWindowEnabled
GetCursorPos
LoadMenuW
GetWindowThreadProcessId
FindWindowW
gdi32
SetBkMode
DeleteObject
GetStockObject
SetTextColor
SetBkColor
CreateSolidBrush
comdlg32
GetOpenFileNameW
shell32
Shell_NotifyIconW
ShellExecuteW
ole32
CoInitialize
CoUninitialize
comctl32
InitCommonControlsEx
ImageList_Create
ImageList_AddMasked
shlwapi
PathFileExistsW
winmm
PlaySoundW
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ