Static task
static1
Behavioral task
behavioral1
Sample
658a6956c689d51ee4caeb77892d364d.exe
Resource
win7-20230220-en
General
-
Target
658a6956c689d51ee4caeb77892d364d.exe
-
Size
416KB
-
MD5
658a6956c689d51ee4caeb77892d364d
-
SHA1
1e1ee8c1682b4fd2d9292c2c45839613ccf763f3
-
SHA256
3945f9e4b33ca4afbaac6778951fed079a5d3a630159038c5dfd9e55f550d2d5
-
SHA512
8b13c77316627147c36637d888c6e69e59d0003b6e5ab4ac6e860c18726ddd41eaa15051d6378271c5f2d77b81135c76e38d4ed89cdae3c1ad5b4422cab2ee9e
-
SSDEEP
6144:jy0P7sQLwciHM5oiT4MKlz3IVJ3GxerEhgVIXFM:jnnUcAyVrKGjierLIX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 658a6956c689d51ee4caeb77892d364d.exe
Files
-
658a6956c689d51ee4caeb77892d364d.exe.exe windows x64
87e07f586456c6f86711e4a0d5b2636d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
EventWrite
RegCloseKey
EventRegister
EventUnregister
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
GetTokenInformation
ConvertSidToStringSidW
CheckTokenMembership
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteKeyW
OpenThreadToken
OpenProcessToken
kernel32
GetModuleHandleW
lstrcmpiW
RegEnumValueW
RegGetValueW
CreateFileW
FileTimeToSystemTime
GetFileAttributesW
CompareFileTime
SystemTimeToFileTime
GetTempFileNameW
CreateThread
UnregisterApplicationRecoveryCallback
ApplicationRecoveryFinished
ApplicationRecoveryInProgress
RegisterApplicationRecoveryCallback
UnregisterApplicationRestart
RegisterApplicationRestart
OpenMutexW
DuplicateHandle
GetVersionExW
GetPrivateProfileStringW
DebugBreak
SetEvent
CreateEventW
OutputDebugStringA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
MulDiv
SizeofResource
LockResource
LoadResource
FindResourceW
HeapFree
FindResourceExW
GetSystemTime
FreeLibrary
LoadLibraryW
GetLastError
LocalAlloc
LocalFree
GetProcAddress
GetProcessHeap
SetUnhandledExceptionFilter
GetStartupInfoW
HeapAlloc
WaitForSingleObject
Sleep
CompareStringW
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
LeaveCriticalSection
RaiseException
EnterCriticalSection
MultiByteToWideChar
LoadLibraryExW
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
CreateMutexW
DeleteFileW
GetCommandLineW
SetThreadPriority
GetCurrentThread
CreateDirectoryW
OutputDebugStringW
LoadLibraryExA
DelayLoadFailureHook
lstrlenW
CloseHandle
ReleaseMutex
gdi32
GdiAlphaBlend
CreateFontW
GetTextFaceW
CreateRectRgn
CreateDIBSection
GetObjectW
SetLayout
CreateSolidBrush
GetDeviceCaps
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetClipRgn
BitBlt
GetTextExtentPoint32W
DeleteDC
GdiGradientFill
DeleteObject
user32
GetAncestor
CreateWindowExW
DestroyAcceleratorTable
GetUpdateRect
ShowWindow
GetScrollInfo
SetScrollInfo
SetScrollRange
ShowScrollBar
OffsetRect
CopyRect
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
ClientToScreen
DefWindowProcW
ReleaseDC
PtInRect
InflateRect
GetDesktopWindow
DestroyMenu
GetSubMenu
SetWindowPos
GetWindowRect
EndDeferWindowPos
BeginDeferWindowPos
PostMessageW
TrackPopupMenu
MapWindowPoints
ReleaseCapture
SystemParametersInfoW
LockWindowUpdate
GetFocus
RegisterClassW
LoadIconW
LoadCursorW
SetGestureConfig
GetWindowLongPtrW
GetSystemMenu
EnableMenuItem
DestroyWindow
GetDC
SetCursor
SendMessageW
GetClientRect
SetWindowLongPtrW
UpdateWindow
GetSystemMetrics
GetSysColor
EnableScrollBar
SetFocus
CreateCaret
SetCaretPos
SetTimer
KillTimer
ScrollWindowEx
SetCapture
ScreenToClient
MessageBoxW
ChangeWindowMessageFilter
RemoveMenu
GetWindowPlacement
SetWindowPlacement
PostQuitMessage
SetActiveWindow
IntersectRect
EqualRect
MonitorFromWindow
GetMonitorInfoW
MonitorFromRect
CopyAcceleratorTableW
GetMessageW
TranslateMessage
DispatchMessageW
CharNextW
FindWindowW
SetForegroundWindow
SetProcessDPIAware
RegisterClassExW
DeferWindowPos
LoadAcceleratorsW
BeginPaint
HideCaret
ShowCaret
EndPaint
GetMessageExtraInfo
GetKeyboardLayout
LoadImageW
UnregisterClassA
TranslateAcceleratorW
LoadMenuW
UnregisterClassW
IsClipboardFormatAvailable
SetRect
GetScrollBarInfo
GetParent
GetWindowLongW
EnableWindow
FillRect
GetSysColorBrush
IsWindowVisible
GetKeyState
GetAsyncKeyState
SetScrollPos
GetWindowTextLengthW
UpdateLayeredWindow
InvalidateRect
GetWindowTextW
msvcrt
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_cexit
_ismbblead
_unlock
_XcptFilter
__getmainargs
??0exception@@QEAA@XZ
__CxxFrameHandler3
_callnewh
_CxxThrowException
??0exception@@QEAA@AEBQEBDH@Z
__C_specific_handler
memset
?what@exception@@UEBAPEBDXZ
vswprintf_s
_vscwprintf
_wcsicmp
malloc
wcsncpy_s
??0exception@@QEAA@AEBV0@@Z
__dllonexit
_lock
_onexit
realloc
_errno
cos
_vsnwprintf
wcstoul
memcpy
??1exception@@UEAA@XZ
memcpy_s
memmove_s
wcscpy_s
_purecall
calloc
_exit
??0exception@@QEAA@AEBQEBD@Z
free
sin
ntdll
WinSqmAddToStream
WinSqmEndSession
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WinSqmIsOptedIn
WinSqmStartSession
WinSqmSetIfMaxDWORD
shell32
SHGetKnownFolderPath
SHGetFolderPathW
CommandLineToArgvW
SetCurrentProcessExplicitAppUserModelID
SHGetSpecialFolderPathW
ord165
SHCreateDirectoryExW
ShellExecuteW
shlwapi
ord212
ord184
PathFileExistsW
ord628
ord16
SHCreateStreamOnFileW
ord154
ord219
SHStrDupW
ole32
CoCreateInstance
CoTaskMemAlloc
PropVariantClear
CoUninitialize
OleUninitialize
OleInitialize
CoInitializeEx
CoTaskMemFree
CoSetProxyBlanket
StgCreateStorageEx
StgOpenStorageEx
OleSaveToStream
WriteClassStm
CoTaskMemRealloc
OleLoadFromStream
oleaut32
VariantChangeType
SysAllocStringByteLen
SysAllocString
VarUI4FromStr
SystemTimeToVariantTime
SysFreeString
SysStringByteLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
SafeArrayDestroy
VariantInit
slc
SLGetWindowsInformationDWORD
dwmapi
DwmInvalidateIconicBitmaps
DwmSetIconicThumbnail
DwmSetIconicLivePreviewBitmap
DwmSetWindowAttribute
uxtheme
GetThemeFont
CloseThemeData
OpenThemeData
dui70
?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ
?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ
?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ
?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UEAAHXZ
?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ
??1ClassInfoBase@DirectUI@@UEAA@XZ
??0ClassInfoBase@DirectUI@@QEAA@XZ
?GetClassInfoPtr@HWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@HWNDHost@DirectUI@@SAPEAUIClassInfo@2@XZ
?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z
?Register@HWNDElement@DirectUI@@SAJXZ
?Register@ClassInfoBase@DirectUI@@QEAAJXZ
?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z
??1CritSecLock@DirectUI@@QEAA@XZ
?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ
?Register@HWNDHost@DirectUI@@SAJXZ
UnInitProcessPriv
UnInitThread
InitThread
InitProcessPriv
?Initialize@HWNDHost@DirectUI@@QEAAJIIPEAVElement@2@PEAK@Z
?SetAbsorbsShortcut@Element@DirectUI@@QEAAJ_N@Z
?CreateStyleParser@HWNDElement@DirectUI@@UEAAJPEAPEAVDUIXmlParser@2@@Z
?CanSetFocus@HWNDElement@DirectUI@@UEAA_NXZ
?OnThemeChanged@HWNDElement@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z
?GetHWND@HWNDElement@DirectUI@@UEAAPEAUHWND__@@XZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
?RemoveTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?SetKeyFocus@Element@DirectUI@@UEAAXXZ
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
??1NativeHWNDHost@DirectUI@@UEAA@XZ
??0NativeHWNDHost@DirectUI@@QEAA@XZ
?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z
?Host@NativeHWNDHost@DirectUI@@QEAAXPEAVElement@2@@Z
?EndDefer@Element@DirectUI@@QEAAXK@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z
?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
?Destroy@NativeHWNDHost@DirectUI@@QEAAXXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ
?WndProc@HWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z
?OnCompositionChanged@HWNDElement@DirectUI@@UEAAXXZ
?OnWmThemeChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z
?OnDestroy@HWNDElement@DirectUI@@UEAAXXZ
?OnGroupChanged@HWNDElement@DirectUI@@UEAAXH_N@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnEvent@HWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnInput@HWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?Initialize@HWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z
?Destroy@Element@DirectUI@@QEAAJ_N@Z
??1HWNDElement@DirectUI@@UEAA@XZ
??0HWNDElement@DirectUI@@QEAA@XZ
?EraseBkgnd@HWNDHost@DirectUI@@MEAA_NPEAUHDC__@@PEA_J@Z
?SetWindowDirection@HWNDHost@DirectUI@@UEAAXPEAUHWND__@@@Z
?OnAdjustWindowSize@HWNDHost@DirectUI@@UEAAHHHI@Z
?OnWindowStyleChanged@HWNDHost@DirectUI@@UEAAX_KPEBUtagSTYLESTRUCT@@@Z
?OnCtrlThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnSinkThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnSysChar@HWNDHost@DirectUI@@UEAA_NG@Z
?GetHWND@HWNDHost@DirectUI@@UEAAPEAUHWND__@@XZ
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?DefaultAction@Element@DirectUI@@UEAAJXZ
?GetAccessibleImpl@HWNDHost@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?GetKeyFocused@HWNDHost@DirectUI@@UEAA_NXZ
?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z
?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?OnUnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z
?OnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?MessageCallback@HWNDHost@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?SetKeyFocus@HWNDHost@DirectUI@@UEAAXXZ
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Paint@HWNDHost@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?OnDestroy@HWNDHost@DirectUI@@UEAAXXZ
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
?SetAccValue@Element@DirectUI@@QEAAJPEBG@Z
?SetDirection@Element@DirectUI@@QEAAJH@Z
?GetLocation@Element@DirectUI@@QEAAPEBUtagPOINT@@PEAPEAVValue@2@@Z
?OnEvent@HWNDHost@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnInput@HWNDHost@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnPropertyChanged@HWNDHost@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?EnabledProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?BackgroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@P6APEBUPropertyInfo@2@XZHPEAUUpdateCache@2@@Z
??1HWNDHost@DirectUI@@UEAA@XZ
??0HWNDHost@DirectUI@@QEAA@XZ
?SheetProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetSheet@DUIXmlParser@DirectUI@@QEAAJPEBGPEAPEAVValue@2@@Z
?SetWindowActive@Element@DirectUI@@QEAAJ_N@Z
?SetVisible@Element@DirectUI@@QEAAJ_N@Z
?MouseWithinProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetWindowActive@Element@DirectUI@@QEAA_NXZ
?WindowActiveProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?Click@Button@DirectUI@@SA?AVUID@@XZ
?UpdateSheets@DUIXmlParser@DirectUI@@QEAAJPEAVElement@2@@Z
?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z
StrToID
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z
?Release@Value@DirectUI@@QEAAXXZ
?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@I@Z
gdiplus
GdipCreateBitmapFromScan0
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipFree
GdipCreateTexture
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStream
GdipDrawImagePoints
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipCreateFromHDC
GdipDrawImageRectI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipSetCompositingMode
GdipCreateBitmapFromHBITMAP
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFillRectangleI
GdipAlloc
rpcrt4
RpcStringFreeW
UuidCreateSequential
UuidToStringW
UuidCreate
windowscodecs
WICCreateImagingFactory_Proxy
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ