Static task
static1
Behavioral task
behavioral1
Sample
ac7a57c65102335197489d6c1f577f03cd72b44cef2a0915453fbfd4509ee944.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
ac7a57c65102335197489d6c1f577f03cd72b44cef2a0915453fbfd4509ee944.exe
Resource
win10v2004-20230703-en
General
-
Target
ac7a57c65102335197489d6c1f577f03cd72b44cef2a0915453fbfd4509ee944
-
Size
292KB
-
MD5
184f543bbd1677aa892ccdc3ae179b74
-
SHA1
97f939ca47e4a2205f70ef827bb2c7babaf210a4
-
SHA256
ac7a57c65102335197489d6c1f577f03cd72b44cef2a0915453fbfd4509ee944
-
SHA512
de23f25bca52310a80d6e03c8780e47af5868153f221cbe100858effba87aa1a9a87a2aa6178401fc8c289ee6fac9f4a83e347eba4a0e8a6fe098dcdad38d9ee
-
SSDEEP
3072:+9WEColiVeSV9Avkql4t1W5Ho1mrGzL06u7xR+IohukBOVGVok4JVMKvajpyRt:j1olilakqlyCI1mrG1uVgUDsTjpyR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac7a57c65102335197489d6c1f577f03cd72b44cef2a0915453fbfd4509ee944
Files
-
ac7a57c65102335197489d6c1f577f03cd72b44cef2a0915453fbfd4509ee944.exe windows x86
96f339137dfbf4c84484b4b9d871e568
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
RtlMoveMemory
ReadProcessMemory
VirtualProtect
WriteProcessMemory
Sleep
lstrlenW
FreeLibrary
lstrcpynA
GetModuleHandleA
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
WriteFile
GetCommandLineA
GetModuleFileNameA
LCMapStringA
WritePrivateProfileStringA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
SetFilePointer
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RtlZeroMemory
LoadLibraryA
FindClose
VirtualAlloc
RaiseException
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetVersion
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
FindFirstFileA
GetProcAddress
GetStartupInfoA
user32
MessageBoxA
SetWindowPos
SetTimer
GetWindowRect
GetActiveWindow
MoveWindow
EnableWindow
TrackMouseEvent
IsWindow
SetParent
UpdateLayeredWindow
GetWindowLongA
SetWindowLongA
GetWindowThreadProcessId
CallWindowProcA
SystemParametersInfoA
wsprintfA
GetSystemMetrics
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
KillTimer
ole32
CoCreateInstance
StringFromGUID2
CLSIDFromString
CreateStreamOnHGlobal
GetHGlobalFromStream
CoInitialize
CoUninitialize
oleaut32
VariantInit
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
VariantChangeType
VarR8FromCy
VarR8FromBool
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
VariantCopy
atl
ord47
ord42
shlwapi
StrStrA
gdiplus
GdiplusShutdown
GdiplusStartup
GdipGetImageGraphicsContext
GdipSetTextRenderingHint
GdipGetTextRenderingHint
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipSetWorldTransform
GdipDrawRectangle
GdipDeletePen
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveImageToStream
GdipDrawRectangleI
winmm
waveOutSetVolume
oleacc
ObjectFromLresult
shell32
ShellExecuteA
wininet
InternetGetConnectedState
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
Sections
.text Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE