Static task
static1
Behavioral task
behavioral1
Sample
ff1d760ad87597c5d26d685dc5d18a754f022bde3a3fb7bbfe2fdee4d2f73b2e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ff1d760ad87597c5d26d685dc5d18a754f022bde3a3fb7bbfe2fdee4d2f73b2e.exe
Resource
win10v2004-20230220-en
General
-
Target
ff1d760ad87597c5d26d685dc5d18a754f022bde3a3fb7bbfe2fdee4d2f73b2e
-
Size
236KB
-
MD5
071e077f1de4ce870c5ff5b416b1101e
-
SHA1
ed6455524192a53e74489ba99d35f1e21390ccd8
-
SHA256
ff1d760ad87597c5d26d685dc5d18a754f022bde3a3fb7bbfe2fdee4d2f73b2e
-
SHA512
08c705ee7476750e206bbbc061b84e572d12acea90470149228982539e59deb05ac74b3682f828bef91a6b139b52fe6c88b91468d1180d2bf49e01f93bc8ad62
-
SSDEEP
3072:nqt4eF/EmVJjH17R3wDVlOdKEljM2rLkaRS4lfWLe3UaOecGqsmoB98qvRg:ep7VJjVd3w5sTdTYe3TOen+q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff1d760ad87597c5d26d685dc5d18a754f022bde3a3fb7bbfe2fdee4d2f73b2e
Files
-
ff1d760ad87597c5d26d685dc5d18a754f022bde3a3fb7bbfe2fdee4d2f73b2e.exe windows x86
153bb401255309120ef7e928cc99e19a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
UnhandledExceptionFilter
GetTimeZoneInformation
HeapReAlloc
GetACP
HeapSize
TerminateProcess
RaiseException
HeapFree
HeapAlloc
GetStartupInfoA
ExitProcess
GetCommandLineA
GetDriveTypeA
RtlUnwind
GetFileSize
GetFileTime
FileTimeToLocalFileTime
GetFileAttributesA
GetTickCount
FileTimeToSystemTime
GetStringTypeA
GetStringTypeW
GetFullPathNameA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
MultiByteToWideChar
lstrcpyA
WideCharToMultiByte
FindFirstFileA
FindClose
CreateFileA
CloseHandle
GetLastError
GetVolumeInformationA
GetProfileStringA
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
ReadFile
GetCurrentProcess
GetCurrentDirectoryA
SetErrorMode
GetThreadLocale
WritePrivateProfileStringA
GetProcessVersion
GetOEMCP
GetCPInfo
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
EnterCriticalSection
TlsAlloc
LocalAlloc
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
lstrcpynA
SizeofResource
GlobalFlags
lstrcmpA
GetModuleFileNameA
GlobalAlloc
LocalFree
GetCurrentThread
FormatMessageA
lstrlenA
CopyFileA
user32
InflateRect
MessageBeep
GetNextDlgGroupItem
PostThreadMessageA
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
GetClassNameA
LoadStringA
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
RegisterClipboardFormatA
GetFocus
SetFocus
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CharUpperA
DispatchMessageA
PeekMessageA
WinHelpA
GetWindowRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetCursorPos
ScreenToClient
ClientToScreen
GetParent
CreatePopupMenu
TrackPopupMenu
wsprintfA
DestroyMenu
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
SetCursor
InvalidateRect
UpdateWindow
RedrawWindow
GetSysColor
EnableWindow
CopyRect
SetMenuItemBitmaps
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
gdi32
CreateSolidBrush
GetDeviceCaps
GetWindowExtEx
GetViewportExtEx
CreateFontIndirectA
PtVisible
TextOutA
ExtTextOutA
RectVisible
CreateBitmap
Escape
PatBlt
GetTextColor
GetBkColor
LPtoDP
GetMapMode
DPtoLP
CreateDIBitmap
BitBlt
GetTextExtentPointA
CreateCompatibleDC
IntersectClipRect
GetClipBox
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
DeleteDC
SetViewportOrgEx
OffsetViewportOrgEx
SetTextColor
SetMapMode
SetBkMode
SelectObject
SetBkColor
SaveDC
GetStockObject
RestoreDC
DeleteObject
GetObjectA
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
CloseServiceHandle
CreateServiceA
OpenSCManagerA
StartServiceA
OpenServiceA
RegOpenKeyA
DeleteService
ControlService
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
shell32
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
SHGetFileInfoA
comctl32
ord17
ImageList_Destroy
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysStringLen
SysAllocString
VariantChangeType
VariantCopy
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ