Static task
static1
Behavioral task
behavioral1
Sample
1b982ad13d5026b0b84c3b54b66468fc8d2250f5fad0e51b645cf064cd73359a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1b982ad13d5026b0b84c3b54b66468fc8d2250f5fad0e51b645cf064cd73359a.exe
Resource
win10v2004-20230220-en
General
-
Target
1b982ad13d5026b0b84c3b54b66468fc8d2250f5fad0e51b645cf064cd73359a
-
Size
539KB
-
MD5
2c8c5f330de7c3b89f26b1d7adc1c615
-
SHA1
182f43ba409ed1b38b865c19a379f7f8515d7ee6
-
SHA256
1b982ad13d5026b0b84c3b54b66468fc8d2250f5fad0e51b645cf064cd73359a
-
SHA512
d087f5018574a25e8b425673955763425d332e0da781473244505793f336187fc1a9fe1400968b5317bd9780072d0b968858253477dc3a8170a223792a1efa69
-
SSDEEP
12288:Jw9cuKbgzscKtcHiT0G6QBangKpN3rCbf90Vpfg8:a0ascscHjNDngKvrCqVVg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b982ad13d5026b0b84c3b54b66468fc8d2250f5fad0e51b645cf064cd73359a
Files
-
1b982ad13d5026b0b84c3b54b66468fc8d2250f5fad0e51b645cf064cd73359a.exe windows x64
8b0c352951a0343c8ae88821bc8d74ad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
duilib
?HandleCustomMessage@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?GetStyle@WindowImplBase@DuiLib@@UEAAJXZ
?SetMaxInfo@CPaintManagerUI@DuiLib@@QEAAXHH@Z
?HandleMessage@WindowImplBase@DuiLib@@UEAA_JI_K_J@Z
?ShowWindow@CWindowWnd@DuiLib@@QEAAX_N0@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPEAUHINSTANCE__@@@Z
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPEB_W@Z
?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPEAXIPEB_W@Z
?SetResourceType@CPaintManagerUI@DuiLib@@SAXH@Z
?ReloadSkin@CPaintManagerUI@DuiLib@@SAXXZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?Term@CPaintManagerUI@DuiLib@@SAXXZ
??0WindowImplBase@DuiLib@@QEAA@XZ
??1WindowImplBase@DuiLib@@UEAA@XZ
?InitResource@WindowImplBase@DuiLib@@UEAAXXZ
?InitWindow@WindowImplBase@DuiLib@@UEAAXXZ
?GetSkinType@WindowImplBase@DuiLib@@MEAA?AVCDuiString@2@XZ
?GetManagerName@WindowImplBase@DuiLib@@MEAAPEB_WXZ
??0CDuiString@DuiLib@@QEAA@PEB_WH@Z
?RegisterWindowClass@CWindowWnd@DuiLib@@QEAA_NXZ
?RegisterSuperclass@CWindowWnd@DuiLib@@QEAA_NXZ
?Create@CWindowWnd@DuiLib@@QEAAPEAUHWND__@@PEAU3@PEB_WKKHHHHPEAUHMENU__@@@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MEBAPEB_WXZ
?OnFinalMessage@WindowImplBase@DuiLib@@UEAAXPEAUHWND__@@@Z
?Notify@WindowImplBase@DuiLib@@UEAAXAEAUtagTNotifyUI@2@@Z
?GetMessageMap@WindowImplBase@DuiLib@@MEBAPEBUDUI_MSGMAP@2@XZ
?OnClick@WindowImplBase@DuiLib@@MEAAXAEAUtagTNotifyUI@2@@Z
?IsInStaticControl@WindowImplBase@DuiLib@@MEAAHPEAVCControlUI@2@@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MEAA_J_K@Z
?GetClassStyle@WindowImplBase@DuiLib@@UEBAIXZ
?CreateControl@WindowImplBase@DuiLib@@UEAAPEAVCControlUI@2@PEB_W@Z
?QueryControlText@WindowImplBase@DuiLib@@UEAAPEB_WPEB_W0@Z
?MessageHandler@WindowImplBase@DuiLib@@UEAA_JI_K_JAEA_N@Z
?OnClose@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnSize@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnChar@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnCreate@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?GetInstance@CPaintManagerUI@DuiLib@@SAPEAUHINSTANCE__@@XZ
kernel32
RtlCaptureContext
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetProcessHeap
LCMapStringW
GetStringTypeW
GetFileType
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapFree
HeapAlloc
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GlobalAddAtomW
LoadLibraryW
GetProcAddress
FreeLibrary
SizeofResource
GetModuleFileNameW
FreeResource
LockResource
LoadResource
FindResourceW
LeaveCriticalSection
EnterCriticalSection
EncodePointer
SetLastError
GetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
user32
ShowWindow
SetWindowLongW
SetLayeredWindowAttributes
GetWindowLongW
SetWindowPos
RegisterHotKey
GetSystemMetrics
SetTimer
SetWindowDisplayAffinity
ole32
CoCreateInstance
CoInitialize
shlwapi
PathIsDirectoryW
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ