Static task
static1
Behavioral task
behavioral1
Sample
7cd25d633f3d0b66aa5983bcef14bc549839f14d2507e41fe26a1995d256c920.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7cd25d633f3d0b66aa5983bcef14bc549839f14d2507e41fe26a1995d256c920.exe
Resource
win10v2004-20230220-en
General
-
Target
7cd25d633f3d0b66aa5983bcef14bc549839f14d2507e41fe26a1995d256c920
-
Size
396KB
-
MD5
1e91b83496b09c8a347d55a69c45a0ad
-
SHA1
622d0200cc4dede996386bb6cf324c07daf30211
-
SHA256
7cd25d633f3d0b66aa5983bcef14bc549839f14d2507e41fe26a1995d256c920
-
SHA512
40f3aad2efad492f65168f59f5fde914950b8d343572708cc7124759daa37bc51790b129e8a7cac6c05c5e255effe51fa7cd305744cb5e0eed518518f6c18302
-
SSDEEP
6144:D8qHDnjA8AwnXjMArhJN1RAynwKS3navR4K5uy:pDnjAMnXjMGNTAynwKSXaZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cd25d633f3d0b66aa5983bcef14bc549839f14d2507e41fe26a1995d256c920
Files
-
7cd25d633f3d0b66aa5983bcef14bc549839f14d2507e41fe26a1995d256c920.exe windows x86
d34d75ed78f734aecda9f0c6facf48e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
GetFileType
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalAlloc
FormatMessageA
HeapReAlloc
GetACP
GetProfileStringA
Sleep
GetLastError
MultiByteToWideChar
lstrlenA
SetThreadPriority
CreateThread
CreateEventA
PurgeComm
CloseHandle
WaitForSingleObject
TerminateThread
TerminateProcess
GetCurrentProcess
SetEvent
WriteFile
ReadFile
SetCommTimeouts
GetCommTimeouts
SetCommState
BuildCommDCBA
lstrcatA
GetCommState
CreateFileA
InterlockedDecrement
GetVersionExA
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalSize
MulDiv
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
GetTickCount
GetProcAddress
GetCurrentThreadId
GetCurrentThread
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
HeapAlloc
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetCPInfo
CopyFileA
SizeofResource
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetProfileIntA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
lstrcpynA
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
lstrlenW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleA
SetLastError
GlobalFree
LockResource
FindResourceA
LoadResource
GetModuleFileNameA
WideCharToMultiByte
InterlockedIncrement
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
LocalFree
user32
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetClassNameA
GetDesktopWindow
CharUpperA
RegisterClipboardFormatA
DestroyMenu
LoadStringA
wvsprintfA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollPos
GetTopWindow
IsChild
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgCtrlID
CreateWindowExA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
GetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
EndPaint
BeginPaint
GetWindowDC
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
GetActiveWindow
MessageBoxA
wsprintfA
SendMessageA
LoadIconA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
CallNextHookEx
ValidateRect
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
PostQuitMessage
SetRectEmpty
ClientToScreen
WindowFromPoint
IsWindowVisible
GetClassLongA
PostThreadMessageA
CopyRect
GetDoubleClickTime
CopyIcon
GetCapture
ReleaseCapture
SetCapture
ClipCursor
SetTimer
InvertRect
GetFocus
GetMessagePos
IsClipboardFormatAvailable
GrayStringA
GetClientRect
AppendMenuA
GetSystemMenu
DrawIcon
GetSystemMetrics
IsIconic
EnableWindow
SystemParametersInfoA
ReleaseDC
GetDC
DrawTextA
InflateRect
DrawEdge
FrameRect
FillRect
GetSysColor
SetCursor
LoadCursorA
SetRect
DrawFrameControl
InvalidateRect
PtInRect
IsRectEmpty
OffsetRect
DispatchMessageA
TranslateMessage
GetParent
GetKeyState
IsWindow
PostMessageA
DefWindowProcA
GetClassInfoA
GetWindowRect
IntersectRect
KillTimer
ScreenToClient
GetCursorPos
TabbedTextOutA
GetMenuCheckMarkDimensions
MessageBeep
gdi32
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetBkMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
MoveToEx
LineTo
DeleteDC
DeleteObject
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
GetMapMode
DPtoLP
GetTextColor
LPtoDP
CopyMetaFileA
CreateBitmap
GetDIBits
SetDIBits
GetTextMetricsA
PatBlt
CreateFontA
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
GetBkColor
BitBlt
GetDeviceCaps
GetCurrentObject
GetTextExtentPoint32A
GetTextExtentPointA
CreateFontIndirectA
CreateDIBitmap
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteA
comctl32
ImageList_Draw
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ord17
oledlg
ord8
ole32
OleDuplicateData
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoInitialize
CoRegisterMessageFilter
CoRevokeClassObject
CreateStreamOnHGlobal
OleGetClipboard
olepro32
ord253
oleaut32
VariantInit
SysFreeString
VariantCopy
SysAllocString
VariantChangeType
SysAllocStringLen
SysAllocStringByteLen
VariantTimeToSystemTime
SysStringLen
GetErrorInfo
VariantClear
Sections
.text Size: 292KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ