Static task
static1
Behavioral task
behavioral1
Sample
fed50391479243c7fb870f611d646661f67c1b59d20639127a1d5aacce199d53.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
fed50391479243c7fb870f611d646661f67c1b59d20639127a1d5aacce199d53.exe
Resource
win10v2004-20230621-en
General
-
Target
fed50391479243c7fb870f611d646661f67c1b59d20639127a1d5aacce199d53
-
Size
1.0MB
-
MD5
557e6751ea7db12de43d494c7aa8d386
-
SHA1
416c5d7bce353fc00f62c7213f760f51d08ac7e5
-
SHA256
fed50391479243c7fb870f611d646661f67c1b59d20639127a1d5aacce199d53
-
SHA512
9f2fb3ea613bd34ca55d32dd460a62dc9487d1fb371eca07dced81e033c19944d27ce030b45fbac30f73f555a5c4bd820fce2b1a0a588ad663a5d728d48df313
-
SSDEEP
12288:HCoDRcaXe0IT4B8/JrEofd2Ze7JyIIe/ENfBgu20Md2XBLS+0mLTBWxx85U+E39P:PDIa8BrEYIe7JgxMd2DfLq2Ud9P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed50391479243c7fb870f611d646661f67c1b59d20639127a1d5aacce199d53
Files
-
fed50391479243c7fb870f611d646661f67c1b59d20639127a1d5aacce199d53.exe windows x86
0e0137a833b6c574df777de89fa05519
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
IsBadCodePtr
GetLocaleInfoW
IsBadReadPtr
SetUnhandledExceptionFilter
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
LCMapStringW
LCMapStringA
TerminateProcess
GetFileType
SetEnvironmentVariableA
CompareStringW
SetStdHandle
lstrcpyA
GlobalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalLock
GlobalUnlock
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrcpynA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetCurrentThreadId
SetLastError
GetTickCount
GetVersion
GetVersionExA
GetProcAddress
FindResourceA
LoadResource
LockResource
SetLocalTime
CopyFileA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
MulDiv
IsDBCSLeadByte
GetSystemTime
InterlockedIncrement
FormatMessageA
lstrlenA
LocalAlloc
HeapSize
HeapReAlloc
GetACP
ExitThread
CreateThread
ExitProcess
GetProfileStringA
RaiseException
HeapAlloc
HeapFree
GetCommandLineA
GetStartupInfoA
GetTimeZoneInformation
Sleep
GetLocalTime
GetCurrentDirectoryA
RtlUnwind
SetErrorMode
SystemTimeToFileTime
GetShortPathNameA
LocalFileTimeToFileTime
GetFileSize
GetVolumeInformationA
GetThreadLocale
GetStringTypeExA
DeleteFileA
FindFirstFileA
FindClose
UnlockFile
MoveFileA
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
GetOEMCP
GetCurrentProcess
DuplicateHandle
LocalReAlloc
GetCPInfo
TlsGetValue
TlsFree
TlsSetValue
GlobalReAlloc
SizeofResource
GlobalHandle
TlsAlloc
GetDiskFreeSpaceA
GetProcessVersion
GetFullPathNameA
GetFileTime
SetFileTime
GlobalAlloc
GetTempFileNameA
GetFileAttributesA
WritePrivateProfileStringA
GetCurrentThread
GlobalFlags
LeaveCriticalSection
GetPrivateProfileStringA
GetPrivateProfileIntA
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetLastError
lstrcmpA
SetThreadPriority
CreateEventA
SuspendThread
WaitForSingleObject
ResumeThread
SetEvent
lstrcatA
CloseHandle
lstrcmpiA
InterlockedDecrement
user32
GetDCEx
GetSysColorBrush
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
IsZoomed
LoadStringA
FindWindowA
wvsprintfA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
GetDC
SendDlgItemMessageA
MapWindowPoints
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
RegisterClassA
GetMessageTime
GetWindowPlacement
IsIconic
UnpackDDElParam
ReuseDDElParam
WinHelpA
GetClassInfoA
SetFocus
GetWindow
LoadAcceleratorsA
DefMDIChildProcA
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
BringWindowToTop
AdjustWindowRectEx
InvertRect
GetCapture
GetForegroundWindow
GetLastActivePopup
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
EqualRect
GetWindowTextLengthA
CharUpperA
LockWindowUpdate
GetDlgCtrlID
TranslateMessage
SetMenuDefaultItem
SetForegroundWindow
TrackPopupMenu
PeekMessageA
GetMessageA
DispatchMessageA
GetKeyState
ScreenToClient
EnableMenuItem
GetClassLongA
CreateWindowExA
DefWindowProcA
ValidateRect
BeginPaint
EndPaint
DrawMenuBar
CallNextHookEx
GetClassNameA
SetPropA
CallWindowProcA
GetPropA
RemovePropA
UnhookWindowsHookEx
GetNextDlgGroupItem
IntersectRect
DeleteMenu
IsRectEmpty
GetMenuState
GetDesktopWindow
GetMenuStringA
InsertMenuA
AppendMenuA
ModifyMenuA
GetMenuDefaultItem
DrawEdge
GetMessagePos
GetMenuItemID
RegisterWindowMessageA
WindowFromDC
CopyAcceleratorTableA
MapVirtualKeyA
GetKeyNameTextA
CopyImage
GetMenuItemRect
GetMenuItemInfoA
SystemParametersInfoA
IsMenu
GetMenuItemCount
SetWindowPos
SetMenu
LoadCursorA
CopyIcon
ReleaseCapture
SetCapture
SetWindowLongA
BeginDeferWindowPos
DeferWindowPos
RedrawWindow
EndDeferWindowPos
ShowWindow
DestroyWindow
SetTimer
IsWindowVisible
LoadIconA
PostThreadMessageA
CharNextA
MessageBeep
RegisterClipboardFormatA
GetTabbedTextExtentA
SetWindowsHookExA
CreatePopupMenu
PostMessageA
PtInRect
UpdateWindow
LoadBitmapA
GrayStringA
DrawTextA
TabbedTextOutA
GetWindowTextA
GetSystemMetrics
SetRect
LoadMenuA
GetIconInfo
LoadImageA
DrawStateA
FrameRect
OffsetRect
DrawFocusRect
GetSubMenu
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
GetActiveWindow
SetCursor
GetParent
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
DestroyCursor
CopyRect
SetRectEmpty
UnionRect
InflateRect
GetSysColor
InvalidateRect
IsWindow
EnableWindow
GetWindowDC
GetClientRect
GetWindowRect
FillRect
ReleaseDC
GetFocus
IsChild
MenuItemFromPoint
GetCursorPos
SendMessageA
KillTimer
GetMenu
DestroyMenu
GetSystemMenu
wsprintfA
SetParent
SetDlgItemTextA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
gdi32
DeleteObject
PtVisible
CreatePatternBrush
GetStockObject
GetNearestColor
SetWindowOrgEx
CreateRectRgnIndirect
CombineRgn
SelectClipRgn
GetWindowOrgEx
FrameRgn
CreateRectRgn
StartPage
EndPage
CreateRoundRectRgn
GetClipBox
StartDocA
RestoreDC
SaveDC
SetPolyFillMode
SetROP2
SetBkMode
SetMapMode
SetViewportOrgEx
SetStretchBltMode
UnrealizeObject
SetViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
ScaleViewportExtEx
ExcludeClipRect
IntersectClipRect
ScaleWindowExtEx
LineTo
GetWindowExtEx
GetViewportExtEx
StretchDIBits
GetCharWidthA
GetViewportOrgEx
AbortDoc
SetRectRgn
SetAbortProc
CreateDCA
EndDoc
GetStretchBltMode
GetPolyFillMode
GetROP2
GetTextFaceA
GetBkMode
GetCurrentObject
GetTextAlign
LPtoDP
CreateDIBitmap
SetTextAlign
MoveToEx
GetTextExtentPointA
GetCurrentPositionEx
SetPixel
CreateFontA
GetMapMode
Rectangle
GetTextMetricsA
GetDeviceCaps
PatBlt
StretchBlt
Escape
TextOutA
RectVisible
SetBrushOrgEx
ExtTextOutA
CreateFontIndirectA
GetPixel
GetTextColor
DPtoLP
GetBkColor
RoundRect
GetTextExtentPoint32A
CreatePen
CreateSolidBrush
GetObjectA
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
comdlg32
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCreateKeyA
shell32
ExtractIconA
SHGetFileInfoA
DragQueryFileA
DragFinish
ShellExecuteA
ShellExecuteExA
Shell_NotifyIconA
comctl32
ImageList_Draw
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Replace
ImageList_Add
ImageList_GetIcon
ImageList_GetImageCount
FlatSB_EnableScrollBar
InitializeFlatSB
ord17
ImageList_Destroy
ImageList_Create
oledlg
ord8
ole32
OleRun
CoCreateInstance
CoInitialize
CoUninitialize
OleFlushClipboard
OleUninitialize
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CoFreeUnusedLibraries
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
olepro32
ord253
oleaut32
GetErrorInfo
SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VariantCopy
VariantClear
VariantInit
SysFreeString
VarDateFromStr
wininet
InternetOpenA
InternetSetStatusCallback
InternetSetOptionExA
InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetSetFilePointer
InternetConnectA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable
InternetCloseHandle
Sections
.text Size: 616KB - Virtual size: 614KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.srdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE