Static task
static1
Behavioral task
behavioral1
Sample
a1bda07c5e25ffexeexeexeex.exe
Resource
win7-20230703-en
General
-
Target
a1bda07c5e25ffexeexeexeex.exe
-
Size
3.8MB
-
MD5
a1bda07c5e25ffb4c61b39dbad997f67
-
SHA1
7bd67b6f276be22fd8bb0e889a8cd7aef97ad737
-
SHA256
b0f27972f45f188dd08cd112be402a44833dd19937f6311d08c38cd4025eec5b
-
SHA512
8a8a0c914bd53f44433bcb588b744dea00a4e39b63046b3718439ea83cb6c846913050921d34a56771c8e08a51718cc7f20daf7aaa3de4da3f992de8d1986e58
-
SSDEEP
98304:K5c8tYRB5jYPmTdHPYj7qgyL03uwLjd5ZDkNKRoj9ghi1RebMIg9Cbk/V8l2NS:KOLcSKj7ByLKpZDkNeojDIg9Cbk/V8lT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1bda07c5e25ffexeexeexeex.exe
Files
-
a1bda07c5e25ffexeexeexeex.exe.exe windows x86
f93a3ce158cc97a2aa0c749f1529f2c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
WriteConsoleW
EnumSystemLocalesA
GetStringTypeW
CreateFileW
SetEnvironmentVariableA
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
IsValidCodePage
GetStdHandle
SetHandleCount
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
LCMapStringW
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
EncodePointer
DecodePointer
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
HeapFree
QueryPerformanceCounter
GetEnvironmentStringsW
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
InterlockedDecrement
FindResourceExW
SetErrorMode
GetNumberFormatA
GetWindowsDirectoryA
VirtualProtect
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
FileTimeToLocalFileTime
GetTempPathA
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
lstrcmpiA
GetStringTypeExA
SearchPathA
GetProfileIntA
GetOEMCP
GetCPInfo
GetACP
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
FileTimeToSystemTime
GetThreadLocale
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
ReplaceFileA
SystemTimeToFileTime
GetUserDefaultLCID
GetTickCount
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
GetModuleHandleW
CreateFileA
GetFileSize
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
lstrcmpW
FindResourceA
FreeResource
lstrcmpA
GlobalReAlloc
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
GetCurrentThreadId
ResumeThread
SetThreadPriority
CloseHandle
GetCurrentProcessId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
lstrlenW
MulDiv
MultiByteToWideChar
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
lstrcpyA
DeleteFileA
GetFileAttributesA
Sleep
InterlockedIncrement
GetModuleFileNameA
ExitProcess
FreeLibrary
IsBadReadPtr
VirtualFree
HeapAlloc
GetProcessHeap
HeapReAlloc
VirtualAlloc
ActivateActCtx
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
DeactivateActCtx
SetLastError
CreateDirectoryA
GetCurrentDirectoryA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
FormatMessageA
lstrlenA
LocalAlloc
IsValidLocale
user32
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
CopyIcon
SetCursorPos
RealChildWindowFromPoint
UnregisterClassA
HideCaret
InvertRect
FrameRect
CharUpperBuffA
GetIconInfo
DrawIcon
CharNextA
ShowOwnedPopups
WaitMessage
PostThreadMessageA
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawFocusRect
DrawFrameControl
DrawEdge
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
DestroyAcceleratorTable
SetParent
GetSysColorBrush
SetClassLongA
RegisterClipboardFormatA
SystemParametersInfoA
GetMenuItemInfoA
MapVirtualKeyA
GetKeyNameTextA
LockWindowUpdate
GetUpdateRect
UnionRect
SetRect
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
IsRectEmpty
SetMenuDefaultItem
DrawIconEx
IsMenu
GetMenuDefaultItem
CharUpperA
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
LoadCursorA
LoadCursorW
WindowFromPoint
SetCapture
KillTimer
SetWindowRgn
GetSystemMenu
DeleteMenu
SubtractRect
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
SendMessageA
EnableWindow
GetParent
SetRectEmpty
LoadMenuW
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetWindowTextLengthA
GetWindowTextA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
IsClipboardFormatAvailable
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
GetDoubleClickTime
EnumChildWindows
InvalidateRgn
GetNextDlgGroupItem
DestroyCursor
CreateMenu
PtInRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CreateDialogIndirectParamA
MapVirtualKeyExA
GetWindowRgn
SetMenuItemBitmaps
GetSubMenu
ScreenToClient
GetClientRect
InvalidateRect
UpdateWindow
GetWindowRect
InflateRect
GetSysColor
LoadBitmapW
IsChild
GetFocus
LoadImageA
SetTimer
ClientToScreen
LoadIconW
IsCharLowerA
GetSystemMetrics
RedrawWindow
UnhookWindowsHookEx
RemoveMenu
GetMenuItemCount
InsertMenuA
GetMenuItemID
AppendMenuA
GetMenuStringA
GetMenuState
TranslateAcceleratorA
IsWindow
GetWindowLongA
ShowWindow
GetWindow
GetDesktopWindow
SetMenu
PostMessageA
BringWindowToTop
GetLastActivePopup
GetMenu
CopyRect
OffsetRect
IntersectRect
GetClassInfoA
CreatePopupMenu
InsertMenuItemA
IsIconic
IsWindowVisible
SetActiveWindow
LoadAcceleratorsA
ReleaseCapture
GetCapture
PeekMessageA
SetCursor
GetKeyState
GetDlgCtrlID
SetWindowLongA
GetDlgItem
EqualRect
IsWindowEnabled
GetActiveWindow
GetWindowThreadProcessId
SetFocus
DestroyIcon
SetWindowPos
WinHelpA
DestroyMenu
LoadMenuA
ReuseDDElParam
UnpackDDElParam
GetClassNameA
ValidateRect
GetCursorPos
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
MessageBoxA
DrawStateA
DestroyWindow
GetNextDlgTabItem
EndDialog
FillRect
gdi32
GetNearestPaletteIndex
GetSystemPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetWindowOrgEx
GetViewportOrgEx
EnumFontFamiliesExA
SetPaletteEntries
GetTextFaceA
SetPixelV
RealizePalette
GetDIBits
PatBlt
CreatePalette
GetPaletteEntries
ExtFloodFill
GetRgnBox
OffsetRgn
RoundRect
Rectangle
LPtoDP
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
Polygon
Ellipse
Polyline
GetBkColor
CreatePolygonRgn
CreateEllipticRgn
DPtoLP
GetMapMode
SetRectRgn
GetTextMetricsA
CreateDIBSection
SetPixel
StretchBlt
SetDIBColorTable
GetTextColor
CreateRectRgnIndirect
CreateRoundRectRgn
CreateHatchBrush
CreatePen
GetObjectType
SelectPalette
CreateBitmap
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
GetObjectA
GetTextExtentPoint32A
GetStockObject
DeleteObject
CreateFontIndirectA
GetDeviceCaps
CopyMetaFileA
CreateDCA
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
CombineRgn
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
GetFileSecurityA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegSetValueA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExW
RegEnumKeyExA
RegOpenKeyExA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
shell32
SHGetPathFromIDListA
DragQueryFileA
SHAppBarMessage
ShellExecuteA
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHBrowseForFolderA
DragFinish
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
comctl32
InitCommonControlsEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_DrawEx
shlwapi
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathFindExtensionA
PathIsUNCA
ole32
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleLockRunning
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
CoUninitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
OleRun
CoCreateInstance
CoInitialize
OleDuplicateData
oleaut32
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SafeArrayGetElement
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
OleCreateFontIndirect
SysStringLen
SysAllocStringLen
VariantChangeType
SysAllocString
VariantCopy
VariantClear
VariantInit
SysAllocStringByteLen
SysFreeString
GetErrorInfo
oledlg
ord8
gdiplus
GdipCreateFromHDC
GdipDrawImageRectI
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromHBITMAP
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipSetInterpolationMode
ws2_32
recv
getpeername
closesocket
ntohs
inet_ntoa
accept
WSAAsyncSelect
listen
bind
htonl
htons
socket
WSACleanup
send
WSAStartup
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
odbc32
ord41
ord10
ord61
ord3
ord16
ord2
ord1
ord15
ord9
ord14
ord11
ord18
ord13
ord45
ord50
ord51
ord5
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 179KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ