Static task
static1
Behavioral task
behavioral1
Sample
a3715d66dd41c8ea765a85f9c97d39072295d152079ddbeffbe63b0e1bb2836f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a3715d66dd41c8ea765a85f9c97d39072295d152079ddbeffbe63b0e1bb2836f.exe
Resource
win10v2004-20230703-en
General
-
Target
a3715d66dd41c8ea765a85f9c97d39072295d152079ddbeffbe63b0e1bb2836f
-
Size
3.4MB
-
MD5
f9b60246f45e76107019aba9b336a21b
-
SHA1
f21c7791ff53d75f6e53d6afa14144a2e6d01f9d
-
SHA256
a3715d66dd41c8ea765a85f9c97d39072295d152079ddbeffbe63b0e1bb2836f
-
SHA512
d595aeb902a18796c70732e72c557a36ba2c8ca7172fd96ad9961f412be37f1bcb8cba472de15f761eb7e3f24adf158f32721f3560e12b77543cbe1147ddbf37
-
SSDEEP
98304:P5Z0q830m7KLvvCE60CUggObuvhkwXnXAZwNGE8VQFvbxIy8ltazPID18jAsy:Pspw6F/wMwNn86N+RltazPIR8jA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3715d66dd41c8ea765a85f9c97d39072295d152079ddbeffbe63b0e1bb2836f
Files
-
a3715d66dd41c8ea765a85f9c97d39072295d152079ddbeffbe63b0e1bb2836f.exe windows x86
076f406ebcf3c61ea13ff5f686616780
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
IsProcessorFeaturePresent
GetFullPathNameA
WriteConsoleW
SetEnvironmentVariableA
SetConsoleCtrlHandler
FatalAppExitA
SetCurrentDirectoryW
GetTimeZoneInformation
LCMapStringW
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
ExitProcess
HeapReAlloc
RaiseException
RtlUnwind
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
HeapFree
CreateThread
ExitThread
GetStartupInfoW
HeapSetInformation
GetCommandLineW
LocalLock
LocalUnlock
FindResourceExW
VirtualProtect
SearchPathW
InitializeCriticalSectionAndSpinCount
GetDiskFreeSpaceW
ReplaceFileW
GetUserDefaultLCID
GetTempFileNameW
GetNumberFormatW
SetErrorMode
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileW
GetStringTypeExW
GetSystemDirectoryW
GetCurrentDirectoryW
GetThreadLocale
GetAtomNameW
GlobalGetAtomNameW
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GlobalFlags
GetProfileIntW
GetFileTime
GetFileSizeEx
GetFileAttributesW
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileAttributesW
GetFileAttributesExW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
FindClose
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
lstrlenA
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
CopyFileW
FormatMessageW
LocalFree
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
FreeResource
GetTickCount
WinExec
lstrcatW
lstrcpyW
FreeLibrary
GetModuleFileNameW
GetWindowsDirectoryW
MulDiv
GlobalSize
GetVersionExW
MultiByteToWideChar
CreateDirectoryW
GetTempPathW
lstrcmpiW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetDiskFreeSpaceExW
DeleteFileW
CloseHandle
CreateFileW
WideCharToMultiByte
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
ActivateActCtx
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
DeactivateActCtx
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
lstrlenW
GetPrivateProfileIntW
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileStringW
WritePrivateProfileStringW
Sleep
GetDriveTypeW
user32
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
GetMenu
SetWindowPos
GetWindow
LoadMenuW
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
DrawStateW
WindowFromPoint
ClientToScreen
IsWindowVisible
IsRectEmpty
GetDoubleClickTime
SetMenuDefaultItem
OffsetRect
IsChild
CopyIcon
MessageBeep
InsertMenuW
DestroyCursor
GetCapture
ClipCursor
InvertRect
PtInRect
GetFocus
GetMessagePos
IsClipboardFormatAvailable
ScreenToClient
GetCursorPos
IntersectRect
DefWindowProcW
GetClassInfoW
DrawEdge
FrameRect
SystemParametersInfoW
GetDC
DrawIcon
DispatchMessageW
TranslateMessage
PeekMessageW
LoadCursorW
SetCursor
GetDlgCtrlID
UpdateWindow
GetWindowRect
CreateMenu
InSendMessage
TranslateMDISysAccel
AppendMenuW
GetSystemMenu
DrawMenuBar
EnableWindow
KillTimer
SendMessageW
IsWindow
GetDlgItem
LoadIconW
SetWindowRgn
FillRect
SetRect
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetKeyState
GetParent
PostMessageW
SetCapture
LoadBitmapW
ReleaseCapture
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
DrawFocusRect
CopyRect
InflateRect
UnionRect
SetRectEmpty
GetSysColor
InvalidateRect
ReleaseDC
GetWindowDC
GetClientRect
GetSystemMetrics
IsIconic
SetTimer
IsDlgButtonChecked
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
ScrollWindowEx
RedrawWindow
RemoveMenu
DefMDIChildProcW
DefFrameProcW
IsMenu
MonitorFromPoint
GetMenuStringW
GetKeyNameTextW
MapVirtualKeyW
BeginPaint
EndPaint
GetWindowThreadProcessId
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
ValidateRect
GetMessageW
ShowOwnedPopups
GetMenuItemInfoW
DestroyMenu
RegisterClipboardFormatW
UpdateLayeredWindow
RealChildWindowFromPoint
GetDialogBaseUnits
GetSysColorBrush
UnregisterClassW
WaitMessage
DeleteMenu
EnumDisplayMonitors
SetLayeredWindowAttributes
GetTabbedTextExtentW
GetWindowRgn
WindowFromDC
EnumChildWindows
GetDCEx
SubtractRect
CharUpperBuffW
GetUpdateRect
SetWindowLongW
SendNotifyMessageW
MapVirtualKeyExW
IsCharLowerW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
SetClassLongW
DestroyAcceleratorTable
SetParent
IsZoomed
DrawIconEx
CopyImage
GetIconInfo
NotifyWinEvent
EnableScrollBar
HideCaret
GetAsyncKeyState
GetMenuDefaultItem
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
LoadImageW
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorW
PostThreadMessageW
CharUpperW
DestroyIcon
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
RegisterWindowMessageW
CharNextW
gdi32
CombineRgn
GetTextExtentPoint32W
GetDeviceCaps
CreateFontIndirectW
GetStockObject
GetCurrentObject
StartDocW
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
SetViewportOrgEx
Rectangle
Polygon
GetTextMetricsW
PatBlt
SetTextColor
SetBkColor
CopyMetaFileW
CreateDCW
CreateRectRgnIndirect
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
ExtCreateRegion
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
SetRectRgn
SetAbortProc
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
GetCharWidthW
StretchDIBits
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
Polyline
Ellipse
GetDIBits
SetPixel
OffsetRgn
EnumFontFamiliesExW
RoundRect
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
CreateSolidBrush
CreatePen
Escape
TextOutW
RectVisible
PtVisible
GetPixel
CreateBitmap
GetBkColor
BitBlt
DPtoLP
GetViewportExtEx
GetWindowExtEx
GetMapMode
CreateCompatibleBitmap
LPtoDP
ExtTextOutW
GetObjectW
SetDIBColorTable
SelectObject
GetDIBColorTable
StretchBlt
DeleteObject
CreateDIBSection
CreateCompatibleDC
SetWindowExtEx
CreateFontW
DeleteDC
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
OpenPrinterW
GetJobW
ClosePrinter
advapi32
GetFileSecurityW
RegQueryValueExW
RegCloseKey
RegQueryValueW
RegSetValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
SetFileSecurityW
shell32
SHGetDesktopFolder
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
DragQueryFileW
SHAddToRecentDocs
ShellExecuteExW
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
DragFinish
SHGetFileInfoW
ExtractIconW
comctl32
_TrackMouseEvent
ImageList_Draw
InitCommonControlsEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx
shlwapi
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathFileExistsW
PathIsUNCW
ole32
OleQueryLinkFromData
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
StgIsStorageFile
OleIsRunning
GetRunningObjectTable
CoGetMalloc
CreateOleAdviseHolder
CreateDataAdviseHolder
StgOpenStorage
OleQueryCreateFromData
CreateFileMoniker
OleRegGetMiscStatus
OleRegEnumVerbs
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSaveToStream
WriteClassStm
OleSave
CoRevokeClassObject
CoRegisterMessageFilter
OleRun
StgCreateDocfile
PropVariantCopy
CoRegisterClassObject
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CoDisconnectObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleGetClipboard
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoInitialize
OleSetMenuDescriptor
CoCreateInstance
oleaut32
SysAllocString
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SysStringByteLen
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate
OleCreateFontIndirect
VarUdateFromDate
SysAllocStringByteLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
VariantTimeToSystemTime
SafeArrayPtrOfIndex
SysAllocStringLen
SystemTimeToVariantTime
oledlg
OleUIBusyW
urlmon
URLDownloadToFileW
avcodec-58
av_free_packet
av_init_packet
av_new_packet
av_packet_alloc
av_packet_rescale_ts
av_packet_unref
avcodec_alloc_context3
avcodec_close
avcodec_encode_video2
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_free_context
avcodec_open2
avcodec_parameters_copy
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_receive_packet
avcodec_send_frame
avcodec_send_packet
avpicture_fill
avfilter-7
av_buffersink_get_frame
av_buffersrc_add_frame_flags
avfilter_free
avfilter_get_by_name
avfilter_graph_alloc
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_free
avfilter_graph_parse_ptr
avfilter_inout_alloc
avfilter_inout_free
avformat-58
av_dump_format
av_find_default_stream_index
av_guess_format
av_guess_frame_rate
av_interleaved_write_frame
av_read_frame
av_seek_frame
av_write_frame
av_write_trailer
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_new_stream
avformat_open_input
avformat_seek_file
avformat_write_header
avio_close
avio_closep
avio_open
avutil-56
av_audio_fifo_alloc
av_audio_fifo_free
av_audio_fifo_read
av_audio_fifo_realloc
av_audio_fifo_reset
av_audio_fifo_size
av_audio_fifo_write
av_dict_copy
av_dict_free
av_dict_get
av_dict_set
av_fifo_alloc_array
av_fifo_freep
av_frame_alloc
av_frame_free
av_frame_get_buffer
av_frame_unref
av_free
av_freep
av_get_default_channel_layout
av_gettime
av_image_alloc
av_log
av_malloc
av_mallocz_array
av_opt_set_int
av_opt_set_sample_fmt
av_rescale_q
av_rescale_q_rnd
av_samples_alloc
av_samples_get_buffer_size
av_strdup
swresample-3
swr_alloc
swr_alloc_set_opts
swr_convert
swr_convert_frame
swr_free
swr_init
swscale-5
sws_freeContext
sws_getContext
sws_scale
gdiplus
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipFree
GdipCreateBitmapFromStreamICM
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
sdl2
SDL_CondSignal
SDL_UnlockMutex
SDL_CreateMutex
SDL_GetError
SDL_CreateCond
SDL_DestroyMutex
SDL_DestroyCond
SDL_CondWait
SDL_PushEvent
SDL_Delay
SDL_memset
SDL_MixAudioFormat
SDL_Init
SDL_OpenAudioDevice
SDL_PauseAudioDevice
SDL_CreateWindowFrom
SDL_CreateRenderer
SDL_RenderSetLogicalSize
SDL_CreateTexture
SDL_SetRenderDrawColor
SDL_RenderClear
SDL_Log
SDL_DestroyTexture
SDL_DestroyRenderer
SDL_CloseAudioDevice
SDL_CondBroadcast
SDL_WaitEvent
SDL_UpdateYUVTexture
SDL_RenderCopy
SDL_RenderPresent
SDL_CreateThread
SDL_WaitThread
SDL_LockMutex
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 485KB - Virtual size: 485KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 567KB - Virtual size: 566KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ