Static task
static1
Behavioral task
behavioral1
Sample
32c77798976c9aa36ac35d4510229dde1ba61746f5a9aa3efa426bf621ee6348.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
32c77798976c9aa36ac35d4510229dde1ba61746f5a9aa3efa426bf621ee6348.exe
Resource
win10v2004-20230621-en
General
-
Target
32c77798976c9aa36ac35d4510229dde1ba61746f5a9aa3efa426bf621ee6348
-
Size
1.7MB
-
MD5
a48f2967431ca9970ead3dcf2f7c728e
-
SHA1
d4ea36640c8636856a6c752ba665b3d057c3d417
-
SHA256
32c77798976c9aa36ac35d4510229dde1ba61746f5a9aa3efa426bf621ee6348
-
SHA512
6e10f53ee18eb68ecfe4803a0e831214b6f5028d266cc914f250ecdf705713d0f1ee291461001f9703780476e8df999c0171eca0d9db6124a2967484266ac6b1
-
SSDEEP
24576:HqbWKEBDlCto8TwyQzJ6TphyWBuYKWTI3ecRogYwLEFbZsCHF97s2IUDlXnzGImD:KCKE0EJ6TLHcROwBo6Ex60sUDpGINl6N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32c77798976c9aa36ac35d4510229dde1ba61746f5a9aa3efa426bf621ee6348
Files
-
32c77798976c9aa36ac35d4510229dde1ba61746f5a9aa3efa426bf621ee6348.exe windows x86
dc896fd4b54fe940f67cf678f35bf805
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
SetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CreateEventW
CreateDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetWindowsDirectoryA
WriteFile
ReadFile
ConnectNamedPipe
CreateNamedPipeW
WritePrivateProfileStringW
CopyFileW
CreateFileW
SetFileAttributesW
CreateThread
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
FlushInstructionCache
GetFullPathNameA
VirtualQuery
LoadLibraryW
lstrlenA
DebugBreak
IsBadReadPtr
HeapValidate
GetFullPathNameW
SetCurrentDirectoryA
GetCurrentDirectoryA
PeekNamedPipe
GetFileInformationByHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetCurrentDirectoryW
SetEnvironmentVariableW
GetVersionExW
FormatMessageW
LocalFree
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetTempFileNameW
MoveFileW
GetCurrentDirectoryW
SetVolumeLabelW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
GetDiskFreeSpaceExW
OutputDebugStringA
Sleep
DeleteFileW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetDriveTypeW
GetDiskFreeSpaceW
GetFileSize
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
CreateFileA
WriteConsoleW
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
WideCharToMultiByte
GetPrivateProfileIntW
GetPrivateProfileStringW
GetModuleFileNameW
OutputDebugStringW
GetTempPathW
GetDriveTypeA
InterlockedExchange
GetStartupInfoW
RtlUnwind
GetFileAttributesW
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RemoveDirectoryW
MoveFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
HeapReAlloc
HeapSize
GetModuleHandleA
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
user32
OemToCharBuffA
wsprintfW
SetWindowLongW
SendMessageW
ShowWindow
SetDlgItemTextW
MessageBoxW
UnregisterClassA
GetClassLongW
SetClassLongW
DefWindowProcW
GetActiveWindow
DialogBoxParamW
LoadBitmapW
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
EndPaint
BeginPaint
GetWindowLongW
DestroyWindow
CharNextW
EndDialog
CharToOemBuffA
advapi32
GetTokenInformation
OpenProcessToken
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
VarUI4FromStr
SysFreeString
comctl32
InitCommonControlsEx
gdi32
SetBkColor
SetTextColor
SetBkMode
DeleteObject
DeleteDC
BitBlt
SelectObject
GetObjectW
CreateCompatibleDC
CreateSolidBrush
Sections
.text Size: 467KB - Virtual size: 467KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ