Static task
static1
Behavioral task
behavioral1
Sample
552e5100edc72b34934f2d7417f5c230000b46b51ddbb8a94fb7aef30e42b13e.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
552e5100edc72b34934f2d7417f5c230000b46b51ddbb8a94fb7aef30e42b13e.exe
Resource
win10v2004-20230703-en
General
-
Target
552e5100edc72b34934f2d7417f5c230000b46b51ddbb8a94fb7aef30e42b13e
-
Size
1.7MB
-
MD5
0e8ab114d2a955239a5ea3e575b15102
-
SHA1
ba76d62aed2b20b11c8551db6800ccd02d473be3
-
SHA256
552e5100edc72b34934f2d7417f5c230000b46b51ddbb8a94fb7aef30e42b13e
-
SHA512
02969dffaaed13ce0499394c79301921fecbbfda9c9a0c6295bdb23aac7f670ea54ce001bd8e08abe581daa71f95c4ab18a899ce1003918aab36b7c9313067d5
-
SSDEEP
24576:PqbWKEBDlCto8TwyQzJ6TpWnlwZ0yGrMBuH/rjO8NxFuJ6SJwTHZEaCCbVTawaCw:SCKE0EJ6TklxAAPzYJvE5Ew8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 552e5100edc72b34934f2d7417f5c230000b46b51ddbb8a94fb7aef30e42b13e
Files
-
552e5100edc72b34934f2d7417f5c230000b46b51ddbb8a94fb7aef30e42b13e.exe windows x86
dc896fd4b54fe940f67cf678f35bf805
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
SetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CreateEventW
CreateDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetWindowsDirectoryA
WriteFile
ReadFile
ConnectNamedPipe
CreateNamedPipeW
WritePrivateProfileStringW
CopyFileW
CreateFileW
SetFileAttributesW
CreateThread
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
FlushInstructionCache
GetFullPathNameA
VirtualQuery
LoadLibraryW
lstrlenA
DebugBreak
IsBadReadPtr
HeapValidate
GetFullPathNameW
SetCurrentDirectoryA
GetCurrentDirectoryA
PeekNamedPipe
GetFileInformationByHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetCurrentDirectoryW
SetEnvironmentVariableW
GetVersionExW
FormatMessageW
LocalFree
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetTempFileNameW
MoveFileW
GetCurrentDirectoryW
SetVolumeLabelW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
GetDiskFreeSpaceExW
OutputDebugStringA
Sleep
DeleteFileW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetDriveTypeW
GetDiskFreeSpaceW
GetFileSize
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
CreateFileA
WriteConsoleW
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
WideCharToMultiByte
GetPrivateProfileIntW
GetPrivateProfileStringW
GetModuleFileNameW
OutputDebugStringW
GetTempPathW
GetDriveTypeA
InterlockedExchange
GetStartupInfoW
RtlUnwind
GetFileAttributesW
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RemoveDirectoryW
MoveFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
HeapReAlloc
HeapSize
GetModuleHandleA
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
user32
OemToCharBuffA
wsprintfW
SetWindowLongW
SendMessageW
ShowWindow
SetDlgItemTextW
MessageBoxW
UnregisterClassA
GetClassLongW
SetClassLongW
DefWindowProcW
GetActiveWindow
DialogBoxParamW
LoadBitmapW
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
EndPaint
BeginPaint
GetWindowLongW
DestroyWindow
CharNextW
EndDialog
CharToOemBuffA
advapi32
GetTokenInformation
OpenProcessToken
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
VarUI4FromStr
SysFreeString
comctl32
InitCommonControlsEx
gdi32
SetBkColor
SetTextColor
SetBkMode
DeleteObject
DeleteDC
BitBlt
SelectObject
GetObjectW
CreateCompatibleDC
CreateSolidBrush
Sections
.text Size: 467KB - Virtual size: 467KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ