Static task
static1
Behavioral task
behavioral1
Sample
点击此处安装语言包 (2).exe
Resource
win7-20230621-en
General
-
Target
点击此处安装语言包 (2).exe
-
Size
2.0MB
-
MD5
f3b6406de9b3a90e95b4bd515f24023e
-
SHA1
47d793a4215435cc0faecaf88c7fce49d3442c87
-
SHA256
5f834272e427b3bdb003e3a8dc953103615a8758cf2f05ce0b13b176f0abda2f
-
SHA512
2ba47744a2cf6f32b91ff3ba58cfcabc8dcfb577cccd3972350c33251d2f9ef9a9930448a38784ef8964f25393fd81506df7f307897b9ac804bfb49997a6fd5e
-
SSDEEP
49152:+GbuZ4y9+vKcGhpNZoKdswMmG+1Zjawx+e9wSQyfbg+Yz9qcgVrwkMGL:duZd4KcGhpNZozwMmG+1Zjawx+eaStLl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 点击此处安装语言包 (2).exe
Files
-
点击此处安装语言包 (2).exe.exe windows x86
b43f4c6f075a44e40744b0a95b7471e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
LCMapStringW
GetStringTypeW
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
SetEnvironmentVariableA
GetCurrentDirectoryW
FindFirstFileExA
GetDriveTypeA
GetFileInformationByHandle
ExpandEnvironmentStringsA
WaitForMultipleObjects
PeekNamedPipe
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
SleepEx
GetProcessHeap
CreateFileW
WriteConsoleW
GetDriveTypeW
GetTimeZoneInformation
GetStdHandle
GetConsoleMode
GetConsoleCP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
IsValidCodePage
IsProcessorFeaturePresent
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
CreateThread
ExitThread
HeapReAlloc
VirtualQuery
VirtualAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
ExitProcess
DecodePointer
EncodePointer
RtlUnwind
RaiseException
FindResourceExW
VirtualProtect
SearchPathA
Sleep
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetTempFileNameA
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
GetNumberFormatA
GetWindowsDirectoryA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiA
GetACP
GetOEMCP
GetCPInfo
GlobalFlags
FileTimeToSystemTime
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetPrivateProfileStringA
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GetCurrentProcessId
GetModuleFileNameA
GetThreadLocale
InterlockedIncrement
FindResourceA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetModuleHandleA
FreeLibrary
GetProcAddress
CompareStringA
LoadLibraryW
LoadLibraryA
ActivateActCtx
DeactivateActCtx
lstrcmpW
SetLastError
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
lstrlenW
MulDiv
WriteFile
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
lstrcatA
SystemTimeToFileTime
ReadFile
SetFilePointer
GetTempPathA
GetTickCount
InterlockedDecrement
FormatMessageA
lstrlenA
LocalAlloc
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileIntA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GetSystemInfo
GetDynamicTimeZoneInformation
CreateFileA
UnmapViewOfFile
CloseHandle
FindFirstFileA
DeleteFileA
FindClose
GetLastError
user32
CharUpperA
DestroyIcon
WaitMessage
WindowFromPoint
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
KillTimer
SetTimer
DeleteMenu
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
IntersectRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
SetRectEmpty
IsZoomed
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
OffsetRect
CharNextA
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
SetMenu
SetScrollRange
ToAsciiEx
GetKeyboardLayout
EnableWindow
CharUpperW
SendMessageA
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
BringWindowToTop
InsertMenuItemA
LoadImageA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
RedrawWindow
GetMenuDefaultItem
MapVirtualKeyA
GetAsyncKeyState
InvertRect
DrawFocusRect
HideCaret
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
EnableScrollBar
NotifyWinEvent
GetIconInfo
CopyImage
DrawIconEx
RegisterClipboardFormatA
SetWindowRgn
wsprintfA
TranslateAcceleratorA
DrawIcon
CreatePopupMenu
AppendMenuA
GetSystemMenu
IsIconic
GetWindowRect
GetClientRect
LoadIconW
GetSystemMetrics
LoadAcceleratorsA
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuA
GetMenuItemID
GetMenuStringA
GetMenuState
GetWindow
SetWindowPos
SetWindowLongA
GetWindowLongA
GetMenu
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetCursorPos
CallWindowProcA
DefWindowProcA
LockWindowUpdate
GetKeyNameTextA
UnionRect
OpenClipboard
DrawFrameControl
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
DestroyCursor
GetWindowRgn
DrawEdge
DrawStateA
LoadMenuW
SetClassLongA
DestroyAcceleratorTable
SetParent
gdi32
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
GetTextExtentPoint32A
GetTextMetricsA
CreateRectRgnIndirect
GetRgnBox
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateDIBitmap
CreateCompatibleBitmap
EnumFontFamiliesA
GetTextCharsetInfo
MoveToEx
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
GetViewportExtEx
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
CreateRectRgn
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextColor
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
GetBkColor
GetStockObject
CreateBitmap
CopyMetaFileA
SetBkColor
SetTextColor
CreateDCA
GetDeviceCaps
GetObjectA
CreateFontIndirectA
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
CryptCreateHash
CryptEncrypt
CryptDestroyKey
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CryptImportKey
shell32
ShellExecuteA
SHGetFileInfoA
SHAppBarMessage
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
DragQueryFileA
DragFinish
comctl32
ImageList_GetIconSize
shlwapi
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA
ole32
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
CoInitializeEx
OleInitialize
RevokeDragDrop
CoFreeUnusedLibraries
OleUninitialize
CoUninitialize
CreateILockBytesOnHGlobal
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoRegisterMessageFilter
OleFlushClipboard
CoRevokeClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
OleIsCurrentClipboard
oleaut32
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysStringLen
OleCreateFontIndirect
SysAllocStringByteLen
VariantChangeType
VariantCopy
VariantInit
SysAllocStringLen
VariantClear
SysFreeString
SysAllocString
oledlg
ord8
wldap32
ord301
ord27
ord41
ord46
ord79
ord35
ord33
ord200
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord32
ws2_32
getsockname
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
ntohs
bind
htons
getsockopt
getpeername
socket
connect
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
gethostname
htonl
ntohl
setsockopt
closesocket
crypt32
CertFreeCertificateContext
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
gdiplus
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
imm32
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
winmm
PlaySoundA
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ