Static task
static1
Behavioral task
behavioral1
Sample
e4f3dab567f70436bef375feac5721bab95e5f5f2a2d3a56182f5878b0ce2e99.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e4f3dab567f70436bef375feac5721bab95e5f5f2a2d3a56182f5878b0ce2e99.exe
Resource
win10v2004-20230220-en
General
-
Target
e4f3dab567f70436bef375feac5721bab95e5f5f2a2d3a56182f5878b0ce2e99
-
Size
1.5MB
-
MD5
0a2a721b578ba7a5f283c6272b999734
-
SHA1
9451dc2a22527fdeab87639982000881dd94bfb3
-
SHA256
e4f3dab567f70436bef375feac5721bab95e5f5f2a2d3a56182f5878b0ce2e99
-
SHA512
17faf81f8f90603ede15d7281f5a94f4e326c007fadfe45bf131fe9a3f064130d8fa8112e4b688270806278b23de672aca3f16d8ab0d52ba8e129e39ecbc72b1
-
SSDEEP
24576:gBpwfuaBrdY3b1bcqjrcfQKN4H6qlRstamRZjxz119hli0WdTMAWOz8pZSG9DwQV:SqfuaBrRQKN4Hr8aujxH97ifwNDsa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4f3dab567f70436bef375feac5721bab95e5f5f2a2d3a56182f5878b0ce2e99
Files
-
e4f3dab567f70436bef375feac5721bab95e5f5f2a2d3a56182f5878b0ce2e99.exe windows x86
15d7bd8ef17ac5476cf86376fb7705bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
FileTimeToLocalFileTime
Sleep
WaitForMultipleObjects
GetTickCount
SetPriorityClass
GetCurrentProcess
lstrlenA
lstrcatA
GetLastError
ReadFile
GetStdHandle
WriteFile
MoveFileW
DeleteFileW
FreeLibrary
LoadLibraryExA
LoadLibraryA
AreFileApisANSI
LoadLibraryExW
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
SetCurrentDirectoryA
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
CreateDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
GetShortPathNameA
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathA
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
GetFullPathNameW
SearchPathW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindFirstChangeNotificationW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetFileSize
SetFilePointer
GetFileInformationByHandle
SetEndOfFile
CreateFileA
CompareFileTime
FileTimeToSystemTime
EnterCriticalSection
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
GetVersionExA
UnmapViewOfFile
ExpandEnvironmentStringsW
MapViewOfFile
CreateFileMappingA
GetFileSizeEx
GetCommandLineW
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetLocaleInfoA
GetLocaleInfoW
IsValidCodePage
SetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapDestroy
HeapCreate
HeapReAlloc
FatalAppExitA
ExitProcess
HeapSize
IsDebuggerPresent
TerminateProcess
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
CreateThread
GetCurrentThreadId
GetProcAddress
DeleteCriticalSection
ExitThread
HeapFree
HeapAlloc
RtlUnwind
RaiseException
user32
CharPrevExA
MoveWindow
InvalidateRect
SetFocus
CharToOemA
CharLowerW
CharUpperW
CharLowerA
CharUpperA
DialogBoxParamW
CreateDialogParamW
DialogBoxParamA
CreateDialogParamA
GetDialogBaseUnits
SystemParametersInfoA
GetDlgCtrlID
GetWindowLongA
SetWindowLongA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
GetWindowTextA
GetWindowTextLengthA
CreateWindowExA
SendMessageW
LoadStringW
LoadStringA
CharPrevA
CharNextA
MessageBoxW
LoadIconA
LoadCursorA
wsprintfA
SetDlgItemTextA
ShowWindow
KillTimer
SetTimer
PostMessageA
ScreenToClient
IsDlgButtonChecked
IsWindow
EndDialog
SendMessageA
GetWindowRect
MapDialogRect
GetDlgItem
SetCursor
gdi32
GetStockObject
shell32
DragFinish
SHGetPathFromIDListA
SHBrowseForFolderA
DragQueryFileA
DragQueryFileW
SHGetMalloc
SHGetFileInfoA
ole32
CoInitialize
CoUninitialize
oleaut32
VariantCopy
SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString
shlwapi
PathFileExistsW
Sections
.text Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ