Static task
static1
Behavioral task
behavioral1
Sample
Proxifier.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Proxifier.exe
Resource
win10v2004-20230703-en
General
-
Target
Proxifier.rar
-
Size
1.9MB
-
MD5
78ec9572e27fb945a866d117aa2f9926
-
SHA1
15de77ef8e56987ad4215d02163681af3f15e9fd
-
SHA256
42c1c45f9596d94fd4d5b89da183ddfb4dbda8f9485cccffb880ddeec89868bd
-
SHA512
4b88d252638a86020563582decd4684639b929f40a74faeac6c6da6316061db3f9eb10c198121024d315501a44eca17f18405693f697cb8c2e37fe0d8dc9abe9
-
SSDEEP
49152:boELT4lR2N3Eq5M6AI5g4KbZDVxK9b/4s2xW3Lg93KeAG2LkAUspuv:LP1c6Ah4K1Dg/4sLCKzG2Lknspuv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Proxifier.exe
Files
-
Proxifier.rar.rar
-
Proxifier.exe.exe windows x86
b9c63bc618542b1c2a4b27c72ee1f1db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetACP
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
GetOEMCP
GetCommandLineW
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetCPInfo
LCMapStringW
QueryPerformanceFrequency
SwitchToThread
GetStringTypeW
TryEnterCriticalSection
ExpandEnvironmentStringsA
OutputDebugStringW
ReadConsoleW
FindFirstFileExW
GetCommandLineA
SetFilePointerEx
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
CreateTimerQueue
SignalObjectAndWait
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
UnhandledExceptionFilter
WaitForSingleObjectEx
GetWindowsDirectoryW
FindResourceExW
SetErrorMode
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
SearchPathW
IsValidCodePage
GetProfileIntW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
LocalReAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
VerifyVersionInfoW
VerSetConditionMask
GlobalReAlloc
GetCurrentDirectoryW
GlobalGetAtomNameW
LocalAlloc
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetTempFileNameW
GetFileTime
GetDiskFreeSpaceW
GetThreadLocale
GetStringTypeExW
MoveFileW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
DeleteFileW
lstrcmpiW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
lstrcpyW
WritePrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GlobalFindAtomW
GlobalAddAtomW
GetTickCount
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
GetSystemDirectoryW
EncodePointer
OutputDebugStringA
SetThreadPriority
FreeResource
CopyFileW
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
FormatMessageW
TerminateProcess
GetSystemTime
GetComputerNameW
GetCurrentThread
GetTempPathW
LoadLibraryW
SetUnhandledExceptionFilter
GetPrivateProfileStringW
GetComputerNameA
SetLastError
ExpandEnvironmentStringsW
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
CreateDirectoryW
OpenProcess
SuspendThread
GetFileAttributesW
CreateMutexW
GetCurrentProcessId
GetExitCodeProcess
OpenMutexW
SetEvent
ResetEvent
GetCurrentProcess
GetVersionExW
GetModuleFileNameW
CreateEventW
InitializeCriticalSection
ConnectNamedPipe
CreateNamedPipeW
WaitForSingleObject
CreateFileW
ResumeThread
LocalFree
GetModuleHandleW
FlushFileBuffers
WriteFile
ReadFile
Sleep
CloseHandle
GetCurrentThreadId
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
user32
EndDialog
CreateDialogIndirectParamW
MonitorFromPoint
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
GetWindowThreadProcessId
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckRadioButton
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
SystemParametersInfoW
IsZoomed
PostQuitMessage
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
CopyImage
GetIconInfo
UpdateLayeredWindow
EnableScrollBar
UnregisterClassW
PostMessageW
DefWindowProcW
LoadIconW
GetWindowLongW
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
EndPaint
BeginPaint
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
CharUpperW
GetAsyncKeyState
SetWindowRgn
SetCursor
IntersectRect
NotifyWinEvent
SetParent
ShowOwnedPopups
GetMenuDefaultItem
CountClipboardFormats
IsClipboardFormatAvailable
SetRect
InSendMessage
BringWindowToTop
GetUpdateRect
LockWindowUpdate
UnionRect
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
DrawTextW
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
GetSysColorBrush
SetClassLongW
CreatePopupMenu
GetKeyNameTextW
MapVirtualKeyW
DestroyAcceleratorTable
TranslateAcceleratorW
UnpackDDElParam
DrawTextExW
LoadCursorW
FindWindowW
SendMessageW
IsIconic
GetLastActivePopup
SetForegroundWindow
UpdateWindow
MessageBoxW
SetMenuItemInfoW
InsertMenuItemW
wsprintfW
EnableWindow
SetRectEmpty
InvalidateRect
ClientToScreen
GetCursorPos
ScreenToClient
GetSysColor
DestroyIcon
GetParent
GetClientRect
GetDC
LoadMenuW
GetSubMenu
SetTimer
LoadImageW
GetSystemMetrics
ReleaseDC
CreateIconIndirect
RedrawWindow
GetWindowRect
GetDesktopWindow
DeleteMenu
AppendMenuW
SetMenuDefaultItem
GetFocus
FillRect
InflateRect
IsWindowVisible
PtInRect
IsChild
HideCaret
MessageBeep
GetSystemMenu
EnableMenuItem
KillTimer
OffsetRect
SetCapture
WindowFromPoint
ReleaseCapture
DrawFrameControl
IsRectEmpty
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
GetClassInfoW
LoadAcceleratorsW
DestroyMenu
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
GetActiveWindow
GetKeyState
ValidateRect
SetWindowsHookExW
DrawIconEx
OpenClipboard
CloseClipboard
InvertRect
SetClipboardData
CallNextHookEx
RegisterWindowMessageW
GetMessagePos
GetMessageTime
CallWindowProcW
GetNextDlgTabItem
GrayStringW
TabbedTextOutW
GetWindowDC
PostThreadMessageW
WaitMessage
IsMenu
TrackMouseEvent
ReuseDDElParam
EmptyClipboard
DrawStateW
DrawEdge
DrawFocusRect
ModifyMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
SendDlgItemMessageA
SendNotifyMessageW
CopyAcceleratorTableW
RealChildWindowFromPoint
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
EnumChildWindows
GetTabbedTextExtentW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
CharUpperBuffW
SetCursorPos
CopyIcon
FrameRect
CreateMenu
SubtractRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetComboBoxInfo
GetDoubleClickTime
DestroyCursor
DrawIcon
IsCharLowerW
MapVirtualKeyExW
GetWindowRgn
GetMenuItemInfoW
gdi32
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
StartDocW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
DPtoLP
CreateRectRgnIndirect
PatBlt
CreateDIBSection
CombineRgn
GetDIBits
RealizePalette
StretchBlt
SelectClipRgn
CreateEllipticRgn
Ellipse
GetBkColor
CreatePolygonRgn
Polygon
Polyline
RoundRect
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetMapMode
SetRectRgn
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetRgnBox
OffsetRgn
GetCharWidthW
GetWindowOrgEx
CreatePalette
GetPaletteEntries
GetViewportOrgEx
LPtoDP
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
GetTextAlign
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetNearestPaletteIndex
GetSystemPaletteEntries
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextFaceW
SetPixelV
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
SetTextColor
SetBkColor
CreateBitmap
CreateDCW
DeleteDC
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
Rectangle
GetTextMetricsW
GetTextColor
GetTextExtentPoint32W
GetStockObject
CreateFontW
GetObjectW
CreateFontIndirectW
CreatePen
SetPixel
SetDIBColorTable
CreateRoundRectRgn
CopyMetaFileW
msimg32
TransparentBlt
AlphaBlend
winspool.drv
DocumentPropertiesW
ClosePrinter
GetJobW
OpenPrinterW
advapi32
RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
GetLengthSid
CopySid
OpenThreadToken
OpenProcessToken
GetTokenInformation
RegEnumValueW
SetFileSecurityW
GetFileSecurityW
RegEnumKeyExW
RegQueryValueW
RegEnumKeyW
IsValidSid
RegSetValueW
EqualSid
LookupAccountSidW
RegQueryValueExA
RegOpenKeyExA
shell32
DragQueryFileW
SHGetSpecialFolderPathW
DragAcceptFiles
ShellExecuteW
ExtractIconExW
Shell_NotifyIconW
SHBrowseForFolderW
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHAddToRecentDocs
ExtractIconW
ShellExecuteExW
comctl32
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_Draw
ImageList_AddMasked
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DragLeave
ImageList_EndDrag
shlwapi
SHCreateStreamOnFileW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathRemoveFileSpecW
StrFormatKBSizeW
uxtheme
GetThemeSysColor
DrawThemeParentBackground
IsAppThemed
DrawThemeText
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
ole32
RevokeDragDrop
OleSaveToStream
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleGetIconOfClass
OleCreate
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
OleGetClipboard
DoDragDrop
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
OleLockRunning
OleSetMenuDescriptor
CoInitializeEx
CreateStreamOnHGlobal
OleIsRunning
OleRun
GetRunningObjectTable
CreateItemMoniker
CoLockObjectExternal
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleRegEnumVerbs
OleRegGetMiscStatus
CoDisconnectObject
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
OleCreateFromFile
OleLoad
OleSave
OleSetContainedObject
oleaut32
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
oledlg
OleUIBusyW
OleUIObjectPropertiesW
OleUIEditLinksW
OleUIPasteSpecialW
OleUIInsertObjectW
OleUIAddVerbMenuW
gdiplus
GdiplusShutdown
GdipGetImageWidth
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
secur32
QuerySecurityPackageInfoA
FreeContextBuffer
InitializeSecurityContextA
CompleteAuthToken
AcquireCredentialsHandleA
FreeCredentialsHandle
DeleteSecurityContext
crypt32
CryptUnprotectData
CryptProtectData
iphlpapi
NotifyAddrChange
xmllite
CreateXmlWriter
CreateXmlReader
ws2_32
getservbyport
gethostbyname
inet_addr
getservbyname
htons
ntohl
WSACreateEvent
closesocket
send
recv
socket
bind
listen
accept
ntohs
gethostbyaddr
WSAAddressToStringW
select
WSAEnumProtocolsW
WSASocketW
setsockopt
getsockopt
getsockname
connect
WSAAccept
recvfrom
sendto
__WSAFDIsSet
ioctlsocket
WSAGetLastError
inet_ntoa
WSASetLastError
htonl
WSAStartup
WSAStringToAddressW
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
wininet
HttpQueryInfoW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
winmm
PlaySoundW
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 547KB - Virtual size: 546KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ