Static task
static1
Behavioral task
behavioral1
Sample
03cdecb3154f3aed89b921ca6b3eab498c91708b495097b0c9ee1574f9806644.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
03cdecb3154f3aed89b921ca6b3eab498c91708b495097b0c9ee1574f9806644.exe
Resource
win10v2004-20230220-en
General
-
Target
03cdecb3154f3aed89b921ca6b3eab498c91708b495097b0c9ee1574f9806644
-
Size
180KB
-
MD5
4c52e8d32837d375c543d9fe6a997f10
-
SHA1
4bdfce79bb3936eeb7076fe30567788443652686
-
SHA256
03cdecb3154f3aed89b921ca6b3eab498c91708b495097b0c9ee1574f9806644
-
SHA512
1298214939cbdd140ee3795a119aaaa9f3f28b019b97ba757ca684541805a2e2136008f2879793480d0bf4c02795fc29b3ccd2dfda656af923d8dc9243be63ad
-
SSDEEP
3072:eiAcwyEOmQK+bjRCINyVIZVPIthkLMKWj:MyEUK+bb9skLMKm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03cdecb3154f3aed89b921ca6b3eab498c91708b495097b0c9ee1574f9806644
Files
-
03cdecb3154f3aed89b921ca6b3eab498c91708b495097b0c9ee1574f9806644.exe windows x86
fa46556b7feaf23a318fb5db449617e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
FreeLibrary
LoadLibraryW
WaitForSingleObject
CreateProcessW
OutputDebugStringW
WriteFile
GetStringTypeExW
GetThreadLocale
GetLastError
CreateDirectoryW
GetProcAddress
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleHandleW
DeleteFileW
lstrlenA
InterlockedIncrement
CopyFileW
GetSystemDirectoryW
SetCurrentDirectoryW
TlsAlloc
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiW
SetLastError
LoadLibraryExW
GetModuleFileNameW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetEndOfFile
IsValidCodePage
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
RtlUnwind
ExitProcess
HeapSize
HeapCreate
HeapDestroy
CreateFileA
TlsFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStartupInfoA
GetFileType
FindFirstFileW
FindClose
CreateFileW
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
SetFileAttributesW
GetTickCount
TlsSetValue
TlsGetValue
GetStdHandle
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
InterlockedDecrement
lstrlenW
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
SetHandleCount
Sleep
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
FlushFileBuffers
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
EnterCriticalSection
RaiseException
GetVersionExA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
ReadFile
GetConsoleCP
GetConsoleMode
SetFilePointer
HeapReAlloc
user32
GetActiveWindow
GetWindowTextLengthW
LoadIconW
UnregisterClassA
EndPaint
CallWindowProcW
DefWindowProcW
LoadBitmapW
DestroyWindow
OffsetRect
SystemParametersInfoW
MapWindowPoints
BeginPaint
ShowWindow
ScreenToClient
GetClientRect
GetWindowRect
MoveWindow
GetWindowLongW
IsWindow
GetWindow
GetWindowTextW
SetWindowTextW
CharNextW
LoadStringW
MessageBoxW
GetDlgItem
EnableWindow
KillTimer
SetTimer
SendMessageW
GetParent
SetWindowLongW
SetWindowPos
gdi32
DeleteDC
CreateFontIndirectW
DeleteObject
CreateCompatibleDC
SetBkColor
ExtTextOutW
TextOutW
BitBlt
SetBkMode
SelectObject
GetObjectW
advapi32
RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegDeleteKeyW
RegQueryInfoKeyW
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW
ole32
CoTaskMemRealloc
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
PropertySheetW
CreatePropertySheetPageW
DestroyPropertySheetPage
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ