Static task
static1
Behavioral task
behavioral1
Sample
8f3663af926fc4e0b48e6eb0b6244b486d66fb0bc260c6fadcf8f279c0da8dc7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8f3663af926fc4e0b48e6eb0b6244b486d66fb0bc260c6fadcf8f279c0da8dc7.exe
Resource
win10v2004-20230221-en
General
-
Target
8f3663af926fc4e0b48e6eb0b6244b486d66fb0bc260c6fadcf8f279c0da8dc7
-
Size
912KB
-
MD5
f46c45842df04a632b715c8f54a63189
-
SHA1
60e0073865e66c95781f1c940e77b22f98668f29
-
SHA256
8f3663af926fc4e0b48e6eb0b6244b486d66fb0bc260c6fadcf8f279c0da8dc7
-
SHA512
1703d34866a30eb08e7bc03924314e58e7648280ed4664ae1a784032526ed70a4db5b600676a39d3cf5cd5fce2848743863e5fdd7b8c6eb77a66545913d2a78d
-
SSDEEP
12288:pLgS5A5QkPwmqD2rnj6+HN2ojwAKJEBHQFphlrvnN:wgmqD2r2GNGvIahlrvnN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f3663af926fc4e0b48e6eb0b6244b486d66fb0bc260c6fadcf8f279c0da8dc7
Files
-
8f3663af926fc4e0b48e6eb0b6244b486d66fb0bc260c6fadcf8f279c0da8dc7.exe windows x86
1190d9621db99c2701e2a290f842fbf0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
FreeEnvironmentStringsA
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FatalAppExitA
GetLocalTime
GetProfileStringA
GetSystemTime
CloseHandle
GetTimeZoneInformation
HeapSize
GetACP
ExitThread
CreateThread
HeapFree
TerminateProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetProfileIntA
lstrcpyW
CopyFileA
GlobalSize
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentProcess
DuplicateHandle
GetProcessVersion
GetCurrentDirectoryA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
SizeofResource
GlobalFlags
SetLastError
lstrlenW
MulDiv
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetTickCount
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GetModuleFileNameA
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcmpA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
InterlockedDecrement
FormatMessageA
lstrlenA
LocalAlloc
ExitProcess
Sleep
IsBadReadPtr
VirtualAlloc
FreeLibrary
VirtualFree
HeapReAlloc
HeapAlloc
LoadLibraryA
GetProcAddress
GetProcessHeap
CreateFileA
WriteFile
GetStringTypeW
user32
KillTimer
InvertRect
GetDCEx
LockWindowUpdate
WindowFromDC
FindWindowA
RemoveMenu
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
CharNextA
CharUpperA
DestroyIcon
LoadStringA
GetSysColorBrush
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetDialogBaseUnits
ClientToScreen
GetClassNameA
GetSystemMenu
AppendMenuA
SetParent
IsZoomed
IsClipboardFormatAvailable
IsRectEmpty
CopyAcceleratorTableA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
SetRectEmpty
InvalidateRect
PtInRect
FillRect
GetDC
ReleaseDC
LoadCursorA
DestroyCursor
InSendMessage
GetMenuStringA
DeleteMenu
InsertMenuA
OemToCharA
CharToOemA
wvsprintfA
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
SetTimer
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
InflateRect
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
RegisterClipboardFormatA
MapDialogRect
GetWindow
SetWindowContextHelpId
DestroyMenu
LoadMenuA
LoadAcceleratorsA
SetFocus
UpdateWindow
SendMessageA
EnableWindow
SetRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
WindowFromPoint
GetWindowThreadProcessId
WaitMessage
SetCapture
GetScrollRange
CreateMenu
GetDlgItemInt
CheckRadioButton
wsprintfA
IsWindowEnabled
GetDlgItem
GetWindowLongA
GetParent
DestroyWindow
CreateDialogIndirectParamA
GetSystemMetrics
IsWindow
SetActiveWindow
GetActiveWindow
EndDialog
GetNextDlgTabItem
PostQuitMessage
PostMessageA
ShowOwnedPopups
SetCursor
MessageBoxA
GetLastActivePopup
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
DispatchMessageA
TranslateMessage
GetMessageA
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
CheckDlgButton
GetPropA
GetTabbedTextExtentA
GetWindowDC
gdi32
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
SetTextAlign
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
LPtoDP
CopyMetaFileA
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetMapMode
SetRectRgn
CombineRgn
CreateRectRgnIndirect
BitBlt
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
PtVisible
CreateBitmap
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
CreateFontIndirectA
CreateFontA
GetCharWidthA
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
StretchDIBits
GetTextMetricsA
SelectObject
GetTextExtentPoint32A
GetWindowOrgEx
GetWindowExtEx
DeleteDC
CreateDCA
SetAbortProc
StartDocA
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
CreatePen
DPtoLP
Rectangle
GetStockObject
PatBlt
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetTextExtentPointA
CreateDIBitmap
GetClipBox
GetDCOrgEx
SetStretchBltMode
comdlg32
GetSaveFileNameA
GetFileTitleA
PrintDlgA
PageSetupDlgA
CommDlgExtendedError
GetOpenFileNameA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegQueryValueExA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
shell32
ExtractIconA
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetFileInfoA
comctl32
ord17
oledlg
ord3
ord7
ord6
ord5
ord9
ord4
ord8
ord1
ole32
OleIsRunning
CoGetClassObject
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoDisconnectObject
OleDuplicateData
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
CoTreatAsClass
OleGetClipboard
DoDragDrop
CoGetMalloc
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleRegEnumVerbs
CreateOleAdviseHolder
OleRegGetMiscStatus
CreateDataAdviseHolder
OleTranslateAccelerator
IsAccelerator
GetRunningObjectTable
CoLockObjectExternal
OleSaveToStream
OleQueryLinkFromData
OleGetIconOfClass
ReleaseStgMedium
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
StringFromCLSID
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CreateFileMoniker
CoTaskMemFree
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
OleQueryCreateFromData
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
CoTaskMemAlloc
CreateBindCtx
GetClassFile
OleSetMenuDescriptor
CreateGenericComposite
CreateItemMoniker
WriteClassStm
CreateStreamOnHGlobal
olepro32
ord253
oleaut32
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
VariantCopy
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
VariantChangeType
SysReAllocStringLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
CreateErrorInfo
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
GetErrorInfo
SetErrorInfo
LoadTypeLi
Sections
.text Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 336KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ