Static task
static1
Behavioral task
behavioral1
Sample
5af43067ad6e35eca23cbfe8de88d89984e9f1996625a8bba845669c5f9fb10b.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5af43067ad6e35eca23cbfe8de88d89984e9f1996625a8bba845669c5f9fb10b.exe
Resource
win10v2004-20230703-en
General
-
Target
5af43067ad6e35eca23cbfe8de88d89984e9f1996625a8bba845669c5f9fb10b.exe.exe
-
Size
736KB
-
MD5
b954dc27c4bf7b87dcc365ee9e1c99db
-
SHA1
405dd8848ecbc7dce62978bf96571d9c2a8bf8f8
-
SHA256
5af43067ad6e35eca23cbfe8de88d89984e9f1996625a8bba845669c5f9fb10b
-
SHA512
93e4422a32f9ead610ac73d6cca7c06f174806ab8df79d0c9fe7a5913dd6063ca8331a93c7080845792d73f6ede54ca44600bfdf1601c0622884763c7eea3150
-
SSDEEP
12288:gj+jvIbgM7h8PzDlHkXOUoWwUF3g6jYc8dn9/Xp+2bqwldnBZP4OsRI+hRC:gj+8biPzDlHxUZG6j2dhZ+Y3jBZP4RI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af43067ad6e35eca23cbfe8de88d89984e9f1996625a8bba845669c5f9fb10b.exe.exe
Files
-
5af43067ad6e35eca23cbfe8de88d89984e9f1996625a8bba845669c5f9fb10b.exe.exe.exe windows x86
06b63c3c1cf15e1778d15b581082f369
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PageSetupDlgA
GetSaveFileNameA
PrintDlgA
ChooseColorA
GetOpenFileNameW
GetOpenFileNameA
CommDlgExtendedError
ChooseColorW
GetSaveFileNameW
advapi32
RegSetValueExA
GetLengthSid
LookupPrivilegeValueA
RegDeleteKeyW
SetSecurityDescriptorOwner
RegEnumValueA
RegCreateKeyW
ControlService
RegisterEventSourceW
DeleteService
RegCreateKeyExA
RegOpenKeyExW
QueryServiceStatus
RegQueryValueW
AdjustTokenPrivileges
DuplicateToken
CreateServiceW
ReportEventA
InitializeSecurityDescriptor
GetAclInformation
GetUserNameA
RegQueryInfoKeyA
RegDeleteKeyA
OpenThreadToken
EqualSid
DeregisterEventSource
RegEnumKeyExW
RegQueryInfoKeyW
RegisterEventSourceA
RegEnumKeyA
CloseServiceHandle
SetSecurityDescriptorDacl
RegCloseKey
SetSecurityDescriptorGroup
RevertToSelf
RegEnumValueW
GetFileSecurityW
GetFileSecurityA
GetSecurityDescriptorDacl
AccessCheck
SetServiceStatus
RegOpenKeyExA
RegDeleteValueA
OpenSCManagerA
MapGenericMask
LookupPrivilegeValueW
InitializeAcl
RegQueryValueExA
GetTokenInformation
RegCreateKeyExW
RegOpenKeyA
RegSetValueExW
FreeSid
RegEnumKeyW
OpenSCManagerW
RegQueryValueExW
RegSetValueA
RegQueryValueA
RegisterServiceCtrlHandlerA
OpenServiceA
RegDeleteValueW
OpenServiceW
winspool.drv
FindFirstPrinterChangeNotification
DeviceCapabilitiesW
SetJobW
OpenPrinterW
GetPrinterW
EnumJobsW
FindNextPrinterChangeNotification
ord204
EnumPortsW
EnumPrintersW
GetJobW
SetPrinterDataW
ClosePrinter
FreePrinterNotifyInfo
DocumentPropertiesW
user32
HideCaret
DestroyWindow
GetClassLongA
IsZoomed
AppendMenuA
GetSysColorBrush
EnableMenuItem
IsDialogMessageW
TabbedTextOutA
CreatePopupMenu
MonitorFromPoint
SendDlgItemMessageA
WindowFromPoint
GetParent
DefWindowProcA
GetMenuItemRect
ShowScrollBar
GetWindowDC
MapWindowPoints
GetCapture
GetActiveWindow
LoadMenuA
SetDlgItemInt
ModifyMenuA
IsWindowVisible
PostThreadMessageW
GetUpdateRgn
wsprintfA
GetSubMenu
MoveWindow
GetSysColor
TranslateMDISysAccel
GetIconInfo
CreateMenu
IsWindowEnabled
CopyAcceleratorTableA
CharUpperBuffA
GetWindow
SetTimer
UnpackDDElParam
DispatchMessageA
SetActiveWindow
SetCapture
IsRectEmpty
GetMessagePos
GetAsyncKeyState
GetMenuItemCount
RegisterWindowMessageA
GetMessageTime
LoadIconA
DlgDirListA
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
LoadMenuIndirectA
SetScrollInfo
ShowCaret
GetClassNameW
GetWindowRect
GetMenuDefaultItem
GrayStringA
TranslateMessage
CreateWindowExW
DrawIcon
GetNextDlgGroupItem
PostMessageA
SetCursor
GetDesktopWindow
ShowWindow
GetWindowTextW
UpdateWindow
IntersectRect
PostThreadMessageA
SetMenuItemInfoA
IsIconic
AppendMenuW
GetWindowRgn
DispatchMessageW
LoadCursorW
TrackPopupMenu
DrawStateA
SetForegroundWindow
DlgDirSelectExA
CreateDialogIndirectParamW
IsClipboardFormatAvailable
SetWindowLongW
TranslateAcceleratorA
GetWindowTextLengthW
DialogBoxIndirectParamW
CreateDialogParamA
GetDlgItemTextA
GetDC
SetCaretBlinkTime
AdjustWindowRectEx
IsWindowUnicode
GetPropA
SetDlgItemTextW
UnregisterClassW
InvalidateRect
mouse_event
PeekMessageA
BeginPaint
GetDlgItem
GetMenuStringW
DestroyIcon
GetScrollInfo
DdeGetData
ClientToScreen
LoadBitmapA
EnableWindow
RemoveMenu
SetWindowLongA
GetSystemMetrics
GetForegroundWindow
MessageBoxW
GetNextDlgTabItem
ArrangeIconicWindows
CharUpperA
IsDlgButtonChecked
DestroyCaret
RemovePropA
LoadImageA
DeferWindowPos
GetMenuContextHelpId
GetSystemMenu
SetMenu
DdeCreateDataHandle
GetMenuState
CallNextHookEx
KillTimer
SetScrollRange
BringWindowToTop
GetClientRect
ReleaseCapture
ExcludeUpdateRgn
DrawFocusRect
UnhookWindowsHookEx
SetScrollPos
DefFrameProcA
GetDlgCtrlID
CreateWindowExA
IsWindow
GetDlgItemInt
DrawIconEx
EmptyClipboard
SystemParametersInfoA
ToAsciiEx
wvsprintfA
SetClipboardViewer
DeleteMenu
ScreenToClient
PeekMessageW
DrawMenuBar
CopyRect
DrawFrameControl
GetScrollPos
InsertMenuA
GetClassInfoW
GetFocus
ReleaseDC
EndPaint
RedrawWindow
CallWindowProcA
GetTabbedTextExtentA
DdeFreeStringHandle
DdeConnect
GetWindowThreadProcessId
SetRectEmpty
WinHelpA
DrawTextA
GetTopWindow
GetClassInfoA
LoadCursorA
EnumChildWindows
DrawTextW
PostQuitMessage
SendDlgItemMessageW
CharLowerA
GetLastActivePopup
DrawEdge
IsMenu
SetWindowsHookExW
DestroyCursor
SetWindowRgn
RegisterClassExA
RegisterClassA
DefDlgProcA
CharNextA
GetWindowLongA
SetPropA
SetWindowsHookExA
MessageBoxA
GetCursorPos
SetRect
GetDialogBaseUnits
FrameRect
GetMenu
DestroyMenu
SetWindowTextA
SetDlgItemTextA
GetWindowTextLengthA
GetMessageW
EnableScrollBar
SetWindowPos
RegisterClassW
FillRect
SetMenuItemBitmaps
MapDialogRect
SetMenuDefaultItem
GetWindowPlacement
ModifyMenuW
GetClassNameA
DlgDirSelectComboBoxExA
GetCursor
EqualRect
OffsetRect
InflateRect
GetComboBoxInfo
MessageBeep
SendMessageA
EndDialog
SendMessageW
GetWindowTextA
DlgDirListComboBoxA
ValidateRect
CreateIconIndirect
SetWindowContextHelpId
CloseClipboard
GetWindowContextHelpId
CheckDlgButton
DefWindowProcW
GetPropW
PostMessageW
UnregisterClassA
ScrollWindowEx
GetKeyState
GetClipboardData
PtInRect
IsChild
CopyIcon
IsDialogMessageA
DragDetect
CheckMenuItem
SetFocus
GetMessageA
kernel32
UnhandledExceptionFilter
WriteFile
GetVersion
QueryPerformanceCounter
lstrcpyA
TerminateThread
MapViewOfFile
VirtualFree
ReadFile
GetEnvironmentStringsW
TerminateProcess
EnumResourceLanguagesW
GetPrivateProfileStringA
FreeEnvironmentStringsW
CreateFileMappingW
FatalAppExitA
GetCommandLineA
GlobalHandle
DeleteFileA
GetCurrentThread
HeapAlloc
GetWindowsDirectoryW
GetUserDefaultLCID
FreeLibrary
HeapSize
GetStringTypeW
LocalFree
SetHandleCount
GetFullPathNameW
SetFileAttributesA
GlobalFindAtomA
GetOEMCP
GetCPInfo
GetEnvironmentVariableW
SetUnhandledExceptionFilter
MultiByteToWideChar
CreateDirectoryA
InterlockedDecrement
LCMapStringW
GetModuleFileNameA
lstrcpyW
SetLastError
WideCharToMultiByte
FindResourceA
GetFileAttributesA
GetPrivateProfileIntA
InterlockedIncrement
GetLocalTime
GetModuleHandleA
GetStdHandle
IsBadWritePtr
TlsAlloc
GlobalLock
GetTimeFormatA
TlsGetValue
ExitThread
SetFileTime
InterlockedCompareExchange
GetSystemTimeAsFileTime
MoveFileW
GetACP
GetLogicalDriveStringsA
IsDebuggerPresent
DisconnectNamedPipe
GetFullPathNameA
GetTempPathW
GetTimeZoneInformation
GetShortPathNameW
ExitProcess
GetFileTime
IsValidLocale
OpenMutexA
GetTickCount
GetStartupInfoA
TlsFree
GetFileAttributesW
HeapFree
lstrcatA
CloseHandle
GetFileSize
GetEnvironmentStrings
GetTempFileNameA
CreateMutexA
SetFileAttributesW
GetWindowsDirectoryA
EnumSystemLocalesA
FileTimeToLocalFileTime
GetStartupInfoW
GlobalMemoryStatus
UnlockFile
FlushFileBuffers
GlobalGetAtomNameA
CreateThread
FreeEnvironmentStringsA
GetStringTypeExW
GetLocaleInfoA
LCMapStringA
FindFirstFileA
MulDiv
GlobalFree
GlobalFlags
IsBadReadPtr
SuspendThread
SetStdHandle
VirtualProtect
WaitForSingleObject
GetProfileStringA
GetVersionExW
ResumeThread
GetModuleHandleW
WinExec
LoadLibraryA
SetEnvironmentVariableA
WritePrivateProfileStringW
lstrcmpiA
OpenEventA
VirtualQuery
GetOverlappedResult
GetCurrentProcess
GetExitCodeThread
GetSystemDefaultLangID
GetTempPathA
CopyFileA
UnmapViewOfFile
InterlockedExchange
SetEnvironmentVariableW
SetFilePointer
DeleteCriticalSection
RtlUnwind
VirtualAlloc
GetProcessHeap
IsValidCodePage
ReleaseMutex
EnumResourceLanguagesA
IsBadCodePtr
SetPriorityClass
GlobalFindAtomW
LoadResource
SearchPathA
HeapDestroy
GetThreadLocale
FindNextFileA
FindClose
Sleep
lstrcpynW
PeekNamedPipe
SetEndOfFile
FindNextFileW
GetCurrentProcessId
GetModuleFileNameW
GetVersionExA
ConvertDefaultLocale
InitializeCriticalSection
GlobalAddAtomW
WritePrivateProfileStringA
FindFirstFileW
SetThreadPriority
LoadLibraryW
DeleteFileW
FileTimeToSystemTime
lstrcmpW
GlobalSize
DuplicateHandle
GetCurrentDirectoryA
CreateFileA
CompareStringA
HeapCreate
LockFile
GetVolumeInformationA
RaiseException
GlobalDeleteAtom
FormatMessageW
CompareFileTime
SizeofResource
TlsSetValue
CreateFileMappingA
GetFileType
LeaveCriticalSection
GetSystemTime
SetEvent
lstrlenW
GetSystemInfo
LocalReAlloc
lstrlenA
GetCurrentThreadId
GlobalReAlloc
GetShortPathNameA
GetStringTypeA
ResetEvent
GetDateFormatA
CompareStringW
HeapReAlloc
WriteConsoleA
EnterCriticalSection
GetDiskFreeSpaceExW
GlobalAlloc
SetErrorMode
GetLocaleInfoW
GetConsoleMode
FindResourceW
SleepEx
GetLastError
GetProcAddress
shlwapi
SHDeleteKeyA
PathIsUNCA
PathAddBackslashA
PathGetDriveNumberA
PathIsUNCServerA
PathUnquoteSpacesA
PathBuildRootA
PathFileExistsA
PathIsURLA
PathCombineA
PathStripToRootA
PathAppendA
PathFindExtensionA
UrlUnescapeA
PathRemoveExtensionA
PathIsDirectoryA
PathIsRootA
PathRemoveFileSpecA
PathFindFileNameA
PathRemoveBackslashA
PathIsUNCServerShareA
PathStripPathA
PathRenameExtensionA
comctl32
ImageList_Destroy
ImageList_GetIcon
InitializeFlatSB
ImageList_GetBkColor
ImageList_GetImageCount
DestroyPropertySheetPage
ImageList_DragEnter
ImageList_SetDragCursorImage
ImageList_SetImageCount
ImageList_Replace
PropertySheetW
CreateStatusWindowW
ImageList_BeginDrag
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_Remove
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_Add
ImageList_EndDrag
ImageList_Draw
ImageList_Create
ImageList_DrawIndirect
ord17
ImageList_DragLeave
ImageList_DragMove
CreatePropertySheetPageA
FlatSB_EnableScrollBar
_TrackMouseEvent
ImageList_GetIconSize
ImageList_SetBkColor
ImageList_LoadImageA
ImageList_AddMasked
oleaut32
LoadTypeLi
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 468KB - Virtual size: 465KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ