Static task
static1
Behavioral task
behavioral1
Sample
c568ac5052b48617b561f3493dc51fccbc3aa5e1ce623cc7c45fe442112b55e0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c568ac5052b48617b561f3493dc51fccbc3aa5e1ce623cc7c45fe442112b55e0.exe
Resource
win10v2004-20230220-en
General
-
Target
c568ac5052b48617b561f3493dc51fccbc3aa5e1ce623cc7c45fe442112b55e0
-
Size
1.7MB
-
MD5
b94d874c61dc1cfcdac0ec82bde588ed
-
SHA1
cbc257b3f52a7ef00d44bf1f7478a020c33547d0
-
SHA256
c568ac5052b48617b561f3493dc51fccbc3aa5e1ce623cc7c45fe442112b55e0
-
SHA512
1c056c840825f0df6cb8ec92e3dae481e7058fd20e6a5774c706a5aada0f64d168cad2b5e16e27226d7d3ac98bc0e60cc8c8b320db4357e77addcb02b4bc4a1a
-
SSDEEP
49152:C17Xac1GPBThAVYshi/uHP8EkNxxt/sjwahOljxC:D0GPBThAVbP/kNxxt/skahOO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c568ac5052b48617b561f3493dc51fccbc3aa5e1ce623cc7c45fe442112b55e0
Files
-
c568ac5052b48617b561f3493dc51fccbc3aa5e1ce623cc7c45fe442112b55e0.exe windows x86
dfd78b9d40b4bb578499add49015770b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFindFileNameW
PathRemoveExtensionW
PathFindExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathAppendW
StrToIntExW
PathFileExistsW
hid
HidD_GetAttributes
HidD_GetPreparsedData
HidP_GetCaps
HidP_GetSpecificValueCaps
HidD_FreePreparsedData
HidD_GetFeature
HidD_SetFeature
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
kernel32
GetOEMCP
IsValidCodePage
LCMapStringW
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
GetStringTypeW
GetACP
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
SetStdHandle
HeapSize
ExitProcess
HeapReAlloc
ExitThread
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
GetVersionExW
GetVersion
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcmpiW
lstrlenW
lstrlenA
GetCPInfo
FreeResource
LoadLibraryW
GetModuleHandleW
GetProcAddress
SetLastError
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
LocalFree
InterlockedExchange
FormatMessageW
LeaveCriticalSection
EnterCriticalSection
GetSystemPowerStatus
SetCurrentDirectoryW
GetModuleFileNameW
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
HeapAlloc
HeapFree
GetStartupInfoW
FindResourceExW
VirtualProtect
GetTempFileNameW
SearchPathW
GetProfileIntW
GetTickCount
GetFileSizeEx
FileTimeToLocalFileTime
SetErrorMode
GetCurrentDirectoryW
FileTimeToSystemTime
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
GlobalGetAtomNameW
CreateFileW
CopyFileW
GetTempPathW
GlobalFlags
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
GetCurrentProcessId
lstrcmpA
GetModuleHandleA
CreateEventW
SuspendThread
SetEvent
ResumeThread
InterlockedDecrement
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
FreeLibrary
lstrcmpW
GetVersionExA
lstrcatW
lstrcpyW
GetFileTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileAttributesW
CreateDirectoryW
WideCharToMultiByte
lstrcpyA
CreateThread
CreateFileA
WriteFile
SetThreadPriority
WaitForSingleObject
TerminateThread
CreateMutexW
GetFileType
user32
DrawIcon
SubtractRect
MapVirtualKeyExW
IsCharLowerW
GetUpdateRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
IsClipboardFormatAvailable
GetDoubleClickTime
PostThreadMessageW
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CharUpperBuffW
CopyIcon
SetCursorPos
SetClassLongW
DestroyAcceleratorTable
DrawFrameControl
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
RegisterClipboardFormatW
LockWindowUpdate
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
GetAsyncKeyState
NotifyWinEvent
SetWindowRgn
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableW
CharNextW
WaitMessage
SetCapture
UnregisterClassW
SetParent
IsRectEmpty
LoadCursorW
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
CharUpperW
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamW
EndDialog
IsZoomed
LoadMenuW
MapVirtualKeyW
GetKeyNameTextW
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
GetMessageW
TranslateMessage
ValidateRect
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetCursorPos
KillTimer
SetTimer
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
SetRect
CopyRect
LoadBitmapW
FillRect
DrawEdge
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
EnableMenuItem
CheckMenuItem
SetWindowLongW
IsWindow
SetRectEmpty
GetMenuStringW
DestroyMenu
DestroyWindow
PostMessageA
RegisterDeviceNotificationA
UpdateWindow
UnregisterDeviceNotification
MessageBoxW
LoadIconW
GetSystemMenu
RegisterDeviceNotificationW
RedrawWindow
GetWindowRgn
PtInRect
DestroyCursor
CreateMenu
CreatePopupMenu
DeleteMenu
AppendMenuW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSubMenu
InsertMenuW
ModifyMenuW
RemoveMenu
GetDC
ReleaseDC
GetDesktopWindow
EnableWindow
GetSysColor
GetSysColorBrush
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
DestroyIcon
DrawIconEx
SystemParametersInfoW
GetSystemMetrics
GetMenuItemInfoW
IsMenu
DrawStateW
CreateIconIndirect
GetIconInfo
InflateRect
OffsetRect
FrameRect
DrawFocusRect
SendMessageW
GetWindowRect
GetClientRect
ClientToScreen
InvalidateRect
GetActiveWindow
GetNextDlgTabItem
GetParent
WindowFromPoint
GetWindowLongW
SetCursor
PostMessageW
LoadImageW
InvalidateRgn
gdi32
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
SetPolyFillMode
SetRectRgn
GetMapMode
DPtoLP
GetTextMetricsW
GetTextColor
GetRgnBox
SetBkMode
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
CreateEllipticRgn
CreatePolygonRgn
Polyline
Polygon
ExtFloodFill
CreatePalette
GetPaletteEntries
SetPaletteEntries
RoundRect
PtInRegion
FrameRgn
GetBoundsRect
GetNearestPaletteIndex
GetSystemPaletteEntries
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
EnumFontFamiliesExW
SetPixelV
GetTextFaceW
CreateRectRgnIndirect
CreateBitmap
RestoreDC
SaveDC
CopyMetaFileW
GetBkColor
GetClipBox
GetDCOrgEx
StretchDIBits
GetCharWidthW
GetBkMode
StretchBlt
GetDeviceCaps
CreateCompatibleDC
GetObjectW
SetDIBColorTable
CreateFontW
SetBkColor
SetTextColor
GetStockObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
GetTextExtentPoint32W
SetPixel
GetCurrentObject
FillRgn
OffsetRgn
CreateCompatibleBitmap
CombineRgn
CreateRoundRectRgn
CreateFontIndirectW
CreateHatchBrush
CreateSolidBrush
CreateDIBitmap
CreatePen
GetPixel
BitBlt
PatBlt
Rectangle
Ellipse
CreateRectRgn
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
shell32
DragQueryFileW
SHAppBarMessage
ShellExecuteW
DragFinish
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
comctl32
ImageList_GetIconSize
_TrackMouseEvent
oledlg
OleUIBusyW
ole32
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
CoGetClassObject
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StgCreateDocfileOnILockBytes
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
StgOpenStorageOnILockBytes
OleLockRunning
oleaut32
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysFreeString
VariantCopy
SysAllocStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
gdiplus
GdipCreateBitmapFromStream
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCreateBitmapFromStreamICM
winmm
PlaySoundW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 303KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ