Static task
static1
Behavioral task
behavioral1
Sample
HosineFamsLicUpdate.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HosineFamsLicUpdate.exe
Resource
win10v2004-20230220-en
General
-
Target
HosineFamsLicUpdate.exe
-
Size
7.1MB
-
MD5
340cf77e0d187d51487b9612d0a15fa6
-
SHA1
8551d0e66893746d0ca902d7e4f736f76ea3becc
-
SHA256
aecb58a1fd2f5d2651ebe3aa27b0c13e01c63b56a375495c44b7766ccf0ce40b
-
SHA512
379204c85253f36ae85774a1840e6538e012927f71cc067aeb7f2b75b271c4c624d1229da67c02c85845b7b94cc8a373e5bccb2dc383623c65bb9bba39d2b903
-
SSDEEP
196608:441zqNFlLJmP5Prg4ny/D1n488cKFdu9Vy:SLJAz+2cKFdu9Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HosineFamsLicUpdate.exe
Files
-
HosineFamsLicUpdate.exe.exe windows x86
6a9c6e4b1e6e7cb9503432bc7b532c46
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapVirtualKeyW
ToAscii
ToUnicode
GetKeyboardLayout
RegisterClipboardFormatW
GetIconInfo
DrawIconEx
DestroyCaret
SetCaretPos
CreateCaret
HideCaret
TranslateMessage
GetKeyboardLayoutList
RegisterWindowMessageW
CreateCursor
CreateIconIndirect
SetCursorPos
DestroyCursor
GetClassInfoW
LoadImageW
GetSysColorBrush
RegisterClassW
DefWindowProcW
GetWindowRgn
UnregisterClassW
GetCursorPos
ClipCursor
GetUpdateRect
InvalidateRgn
BeginPaint
EndPaint
GetSysColor
GetDoubleClickTime
SetDoubleClickTime
SetCaretBlinkTime
PeekMessageW
PostMessageW
GetKeyState
GetCaretBlinkTime
FlashWindowEx
MessageBeep
WindowFromPoint
TrackPopupMenuEx
GetDesktopWindow
ChangeClipboardChain
ValidateRgn
GetClientRect
GetWindowPlacement
SetWindowPlacement
GetWindowRect
IsWindowVisible
IsIconic
IsZoomed
SetParent
SetWindowRgn
MoveWindow
InvalidateRect
ShowWindow
GetSystemMetrics
SendMessageW
SetWindowTextW
ScreenToClient
ClientToScreen
DestroyWindow
SetCursor
SetCapture
AdjustWindowRectEx
ScrollWindowEx
UpdateWindow
SetForegroundWindow
FindWindowW
SendMessageTimeoutW
SetMenuItemInfoW
ReleaseCapture
UnhookWindowsHookEx
DestroyIcon
ReleaseDC
GetDC
GetWindowLongW
SetWindowLongW
GetActiveWindow
GetFocus
SetFocus
GetSystemMenu
GetKeyboardState
GetParent
GetMenu
SystemParametersInfoW
IsChild
EnableMenuItem
SetClipboardViewer
LoadIconW
GetClipboardFormatNameW
CharNextExA
SetTimer
KillTimer
GetQueueStatus
DispatchMessageW
CreateWindowExW
MsgWaitForMultipleObjectsEx
SetWindowPos
kernel32
OpenMutexA
CreateMutexA
SwitchToThread
ReleaseSemaphore
OpenSemaphoreA
CreateSemaphoreA
SearchPathA
SwitchToFiber
GetModuleFileNameA
FindNextFileA
FindFirstFileA
SetErrorMode
DeviceIoControl
GetVersion
GetLocalTime
FindClose
GetFileSize
LocalAlloc
ReadFile
InterlockedDecrement
InterlockedIncrement
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
InterlockedCompareExchange
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetWindowsDirectoryA
GetVersionExA
TerminateThread
ResumeThread
FlushFileBuffers
WriteFile
CreateFileA
GetModuleHandleA
OpenProcess
GetProcessTimes
Sleep
TlsFree
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
FileTimeToSystemTime
GetSystemTime
SystemTimeToFileTime
TlsAlloc
TlsGetValue
TlsSetValue
GetComputerNameW
WideCharToMultiByte
GetEnvironmentVariableA
GetVolumeInformationA
LocalFree
GetLastError
OutputDebugStringA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
ReleaseMutex
CreateMutexW
WaitForSingleObject
CloseHandle
GetFileType
SetEnvironmentVariableA
CompareStringA
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
VirtualQuery
VirtualProtect
LCMapStringW
LCMapStringA
SetFilePointer
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GlobalAlloc
GlobalFree
GlobalSize
CreateFileW
GetModuleHandleW
GetVolumeInformationW
GetLocaleInfoW
IsValidLocale
IsValidLanguageGroup
ExpandEnvironmentStringsW
CreateProcessW
GlobalUnlock
GlobalLock
FindFirstFileW
GetUserDefaultLangID
LoadLibraryW
lstrcmpW
GetDriveTypeW
CompareStringW
GetUserDefaultLCID
MultiByteToWideChar
GetCommandLineW
GetDateFormatW
GetTimeFormatW
GetModuleFileNameW
OutputDebugStringW
CreateSemaphoreW
FormatMessageW
GetVersionExW
SetCurrentDirectoryW
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetFileAttributesExW
SetFilePointerEx
GetCurrentDirectoryW
GetFullPathNameW
DeleteFileW
CopyFileW
MoveFileW
CreateDirectoryW
RemoveDirectoryW
GetFileAttributesW
GetTempPathW
SetEndOfFile
GetFileTime
GetLogicalDrives
GetSystemInfo
CreateEventW
SetEvent
GetThreadPriority
GetCurrentThread
ResetEvent
SetThreadPriority
WaitForMultipleObjects
DuplicateHandle
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
FindNextFileW
RtlUnwind
ExitProcess
TerminateProcess
RaiseException
GetStartupInfoA
GetCommandLineA
ExitThread
CreateThread
FileTimeToLocalFileTime
GetDriveTypeA
GetTimeZoneInformation
SetStdHandle
GetCurrentDirectoryA
SetFileAttributesW
SetLastError
SetUnhandledExceptionFilter
HeapSize
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
advapi32
RegEnumValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegQueryValueExW
RegEnumKeyExW
RegSetValueExW
RegFlushKey
RegCreateKeyExW
OpenProcessToken
GetTokenInformation
RegOpenKeyExW
RegCloseKey
shell32
ShellExecuteW
SHGetSpecialFolderPathW
SHGetFileInfoW
ws2_32
WSAAsyncSelect
gdi32
GetDIBits
CreateDIBSection
CreateBitmap
DeleteDC
SelectObject
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
GetPaletteEntries
CreatePalette
GetFontData
CreateFontIndirectW
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExW
GetOutlineTextMetricsW
ExtTextOutW
SetTextAlign
SetBkMode
SetTextColor
GetGlyphOutlineW
SetWorldTransform
SetGraphicsMode
GetTextExtentPoint32W
CreateEllipticRgn
GetCharABCWidthsW
GdiFlush
SelectClipRgn
CreateRectRgn
GetRegionData
PtInRegion
SelectPalette
RealizePalette
GetStockObject
GetObjectW
CombineRgn
OffsetRgn
DeleteObject
GetCharABCWidthsFloatW
GetDeviceCaps
comdlg32
GetSaveFileNameW
GetOpenFileNameW
ole32
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleInitialize
StringFromGUID2
OleUninitialize
DoDragDrop
ReleaseStgMedium
OleGetClipboard
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemFree
CoGetMalloc
CoCreateInstance
CoUninitialize
CoCreateGuid
CoInitialize
oleaut32
SysAllocString
SysFreeString
SysAllocStringByteLen
VariantInit
SysStringLen
imm32
ImmAssociateContext
ImmGetCompositionStringW
ImmNotifyIME
ImmReleaseContext
ImmGetContext
ImmGetDefaultIMEWnd
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmSetCandidateWindow
winmm
PlaySoundW
Sections
.text Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ