Static task
static1
Behavioral task
behavioral1
Sample
d246bf0882855ad55ccec52f927637e79456b81de99d3a3aa162944592c65c6a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d246bf0882855ad55ccec52f927637e79456b81de99d3a3aa162944592c65c6a.exe
Resource
win10v2004-20230220-en
General
-
Target
d246bf0882855ad55ccec52f927637e79456b81de99d3a3aa162944592c65c6a
-
Size
4.8MB
-
MD5
14de2ba1cf32f47e8b687aa0618510f5
-
SHA1
d7c1103fb6f5946107ebb641aa7c366e70df6028
-
SHA256
d246bf0882855ad55ccec52f927637e79456b81de99d3a3aa162944592c65c6a
-
SHA512
be9ba691f87e370908413f0256e98e38249f03abfb1f58c30e49d6bde0958e305a7fdc8d6262967d241200b5e6016888e6511aef7784eebdcb702d4750dacd7a
-
SSDEEP
98304:TB+7xb6X81owOcMH09z03tJuT5p/fSNnAo4leOm899Tp+QQwm3VVF:l0OXBcM4I3KXSJA1eOm8lQwqV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d246bf0882855ad55ccec52f927637e79456b81de99d3a3aa162944592c65c6a
Files
-
d246bf0882855ad55ccec52f927637e79456b81de99d3a3aa162944592c65c6a.exe windows x86
ecb353cca96bafb620fc72b6a416448f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetSystemInfo
GetCurrentDirectoryW
SetCurrentDirectoryW
GetCurrentProcessId
CreateProcessW
WideCharToMultiByte
VirtualQuery
CreateEventW
SetEvent
ResetEvent
GetSystemTimeAsFileTime
lstrcmpiW
LoadLibraryExW
WriteConsoleW
FlushFileBuffers
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LCMapStringW
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetFileType
SetFilePointerEx
WriteFile
GetStdHandle
GetCommandLineA
GetModuleHandleExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
QueryPerformanceCounter
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
MultiByteToWideChar
GetFileAttributesW
WaitForSingleObject
FindClose
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
FindNextFileW
GetCommandLineW
SetLastError
GlobalFlags
ReadFile
FreeLibrary
GetProcAddress
LoadLibraryW
GetTickCount
FindResourceW
LoadResource
LockResource
FreeResource
SizeofResource
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
LeaveCriticalSection
GetCurrentThreadId
GetModuleHandleW
IsDebuggerPresent
DeleteFileW
SetFilePointer
CreateFileW
ExitProcess
SetFileAttributesW
TryEnterCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetEndOfFile
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
FindFirstFileExW
HeapFree
user32
RemovePropW
RedrawWindow
SetPropW
CallWindowProcW
FillRect
GetSysColor
GetDlgItem
PostMessageW
DeleteMenu
GetPropW
RegisterClassExW
IsWindow
IsIconic
TranslateAcceleratorW
FindWindowExW
GetWindowTextW
EndPaint
GetNextDlgTabItem
BeginPaint
GetClassNameW
UnregisterClassW
MessageBoxW
GetWindowLongW
SetWindowPos
SetWindowLongW
InvalidateRect
DestroyWindow
SendMessageW
DefWindowProcW
DispatchMessageW
TranslateMessage
SetFocus
IntersectRect
IsRectEmpty
WinHelpW
SetMenu
IsWindowEnabled
IsChild
GetDlgCtrlID
IsDialogMessageW
DrawIcon
SetWindowRgn
IsWindowVisible
GetFocus
GetWindow
GetSystemMenu
GetLastActivePopup
GetWindowTextLengthW
DrawTextW
SetRect
GetTopWindow
ClientToScreen
IsZoomed
DestroyIcon
ShowWindow
ScreenToClient
PostQuitMessage
GetClassInfoExW
CharNextW
GetMessageW
PeekMessageW
SetWindowTextW
EnableWindow
GetKeyState
SetCursor
AdjustWindowRectEx
ReleaseDC
GetClientRect
GetSystemMetrics
GetDC
GetWindowRect
LoadImageW
GetParent
GetDesktopWindow
LoadCursorW
LoadIconW
GetActiveWindow
LoadStringW
CreateWindowExW
GetWindowThreadProcessId
MonitorFromWindow
SetActiveWindow
WaitForInputIdle
GetMonitorInfoW
EnumWindows
gdi32
CreateSolidBrush
SetBkColor
SetTextColor
CreateEllipticRgn
CreateRoundRectRgn
GetClipBox
SetBkMode
CombineRgn
CreateFontIndirectW
CreateRectRgn
SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GdiAlphaBlend
GetStockObject
GetDeviceCaps
DeleteObject
SetStretchBltMode
GetObjectW
DeleteDC
advapi32
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RegCloseKey
shell32
DragFinish
DragQueryFileW
Shell_NotifyIconW
ole32
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal
oleaut32
VarUI4FromStr
comctl32
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
InitCommonControlsEx
ws2_32
WSACleanup
gdiplus
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipGetImagePaletteSize
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePalette
GdipSetCompositingMode
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipCloneImage
GdipGetImageHeight
GdiplusStartup
GdiplusShutdown
GdipBitmapLockBits
Sections
.text Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ