Static task
static1
Behavioral task
behavioral1
Sample
037c7b60dd46516d84882a07cc88d4aa987f359561ef03fd998b42349db0e033.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
037c7b60dd46516d84882a07cc88d4aa987f359561ef03fd998b42349db0e033.exe
Resource
win10v2004-20230220-en
General
-
Target
037c7b60dd46516d84882a07cc88d4aa987f359561ef03fd998b42349db0e033
-
Size
224KB
-
MD5
3c482247a3b4837379ea3f2f3d74d241
-
SHA1
cdc40ca0de6f0a8f3a584165a87b63e227acfd1d
-
SHA256
037c7b60dd46516d84882a07cc88d4aa987f359561ef03fd998b42349db0e033
-
SHA512
a29019200cba683f8750312abc36c0412cca3912db13074a97664340dd9d9857b18186fffb3cde99f8306c94df930cf57ca2194bff79e4bf4cc45c8ba39476e3
-
SSDEEP
6144:BteXkQbpHvBCHgF+vMqfjbhJbKoC+hzRC:6UQb1vsHyuMqfbKovC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 037c7b60dd46516d84882a07cc88d4aa987f359561ef03fd998b42349db0e033
Files
-
037c7b60dd46516d84882a07cc88d4aa987f359561ef03fd998b42349db0e033.exe windows x86
73a3353c4eadf3941ce2c5286a74b512
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmInstallIMEW
kernel32
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
RaiseException
DecodePointer
DeleteCriticalSection
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetCurrentThreadId
SetLastError
CreateFileW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapReAlloc
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
HeapSize
HeapDestroy
GetFileAttributesW
CloseHandle
WaitForSingleObject
GetProcAddress
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
ExitProcess
GetLastError
GetSystemWow64DirectoryW
DeleteFileW
MoveFileExW
CopyFileW
WriteConsoleW
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
WriteFile
GetStdHandle
GetModuleHandleExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapFree
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
InitializeCriticalSectionAndSpinCount
user32
GetDlgItem
CheckRadioButton
SetWindowTextW
EnableWindow
SetWindowPos
UnloadKeyboardLayout
MessageBoxW
MapWindowPoints
DialogBoxParamW
GetActiveWindow
DestroyWindow
DefWindowProcW
CharNextW
UnregisterClassW
SetWindowLongW
EndDialog
SetFocus
GetWindowTextLengthW
GetWindowTextW
IsDlgButtonChecked
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
advapi32
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
RegCreateKeyW
RegEnumKeyW
RegSetValueExW
RegOpenKeyW
shell32
ShellExecuteExW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemRealloc
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ