Static task
static1
Behavioral task
behavioral1
Sample
37b2da507342c6928564cecf9c493b6b44c32b144a66f3a3fea3d52b79ba369c.exe
Resource
win7-20230712-en
General
-
Target
37b2da507342c6928564cecf9c493b6b44c32b144a66f3a3fea3d52b79ba369c
-
Size
3.1MB
-
MD5
cbf303739418078a02fa834827205dcc
-
SHA1
4333aaacaf1e84385627f8fb57036f9dad556b5b
-
SHA256
37b2da507342c6928564cecf9c493b6b44c32b144a66f3a3fea3d52b79ba369c
-
SHA512
f809696588b116a39510b349e4002250e7071f05f507006f42b57335d07408528542d3b0ef4c648787d6a0f67c255d0dfc178f7223a9e9ad9d233de1e42b4c0f
-
SSDEEP
98304:KRx0mbRXa2XUtOBIYuFREMsmEEFCcJuzsEFhrKrU6mehNaB0ItvZz+pTWJ7zw:XmbRXHeVEW3MrKrEYIJZz+pTWJ7zw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37b2da507342c6928564cecf9c493b6b44c32b144a66f3a3fea3d52b79ba369c
Files
-
37b2da507342c6928564cecf9c493b6b44c32b144a66f3a3fea3d52b79ba369c.exe windows x86
e2dfb85497392005e59a9d9ba3aaa454
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
SetCurrentDirectoryW
GetStringTypeW
CompareStringW
GetTimeZoneInformation
WriteConsoleW
FreeEnvironmentStringsW
IsValidLocale
SetEnvironmentVariableA
GetDriveTypeW
GetProcessHeap
CreateFileW
HeapDestroy
HeapCreate
IsValidCodePage
GetLocaleInfoW
SetConsoleCtrlHandler
FatalAppExitA
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetStdHandle
HeapSize
HeapQueryInformation
VirtualQuery
VirtualAlloc
Sleep
FindFirstFileExA
GetDriveTypeA
GetFileInformationByHandle
CreateThread
ExitThread
GetSystemTimeAsFileTime
HeapReAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
EncodePointer
DecodePointer
ExitProcess
RaiseException
RtlUnwind
LCMapStringW
LocalUnlock
FindResourceExW
SearchPathA
GetProfileIntA
VirtualProtect
InitializeCriticalSectionAndSpinCount
SetErrorMode
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetFileSizeEx
SetFileAttributesA
GetFileAttributesExA
FileTimeToLocalFileTime
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
MoveFileA
lstrcmpiA
GetStringTypeExA
FileTimeToSystemTime
GetThreadLocale
GetACP
GetAtomNameA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
GetEnvironmentStringsW
QueryPerformanceCounter
SetHandleCount
LocalLock
ReplaceFileA
GetUserDefaultLCID
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
LocalFree
lstrlenW
MulDiv
FindResourceA
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
lstrcmpW
GlobalLock
GlobalUnlock
GetCurrentProcessId
GlobalGetAtomNameA
GlobalAddAtomA
MultiByteToWideChar
ActivateActCtx
DeactivateActCtx
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
FormatMessageA
WaitForSingleObject
GetModuleHandleA
LoadLibraryA
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
SleepEx
GetTickCount
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
GetProcAddress
WriteFile
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrlenA
SystemTimeToFileTime
ReadFile
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
lstrcpyA
lstrcatA
WritePrivateProfileStringA
CreateToolhelp32Snapshot
Process32First
Process32Next
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalMemoryStatusEx
GetSystemInfo
DeleteFileA
CreateFileA
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CloseHandle
FindFirstFileA
FindClose
GetLastError
EnumSystemLocalesA
user32
GetIconInfo
HideCaret
InvertRect
GetMenuDefaultItem
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
SetCursorPos
DestroyAcceleratorTable
SetClassLongA
NotifyWinEvent
IsMenu
GetAsyncKeyState
UpdateLayeredWindow
EnableScrollBar
MonitorFromPoint
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
UnregisterClassA
GetTabbedTextExtentW
CreateMenu
WindowFromDC
InSendMessage
DrawIcon
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
GetDialogBaseUnits
CharUpperA
SetCapture
LockWindowUpdate
GetDCEx
WindowFromPoint
KillTimer
SetTimer
UnionRect
SetLayeredWindowAttributes
EnumDisplayMonitors
GetSysColorBrush
MapVirtualKeyA
GetKeyNameTextA
SetWindowRgn
RealChildWindowFromPoint
SystemParametersInfoA
GetMenuItemInfoA
InflateRect
LoadCursorW
LoadCursorA
DestroyCursor
SetRect
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
LoadMenuW
LoadAcceleratorsW
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ShowOwnedPopups
GetMessageA
TranslateMessage
GetCursorPos
PostQuitMessage
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
GetSystemMetrics
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CopyImage
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
ScrollWindowEx
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxA
GetClassInfoExA
RegisterClassA
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetClassNameA
GetSysColor
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetMenuBarInfo
IsClipboardFormatAvailable
WaitMessage
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
GetUpdateRect
CharUpperBuffA
SubtractRect
FrameRect
WinHelpA
LoadImageA
DestroyIcon
SetFocus
GetWindowThreadProcessId
IsWindowEnabled
EqualRect
GetDlgItem
GetDlgCtrlID
GetKeyState
LoadIconW
SendNotifyMessageA
IsCharLowerA
GetTabbedTextExtentA
GetWindowRgn
EnumChildWindows
FillRect
MapVirtualKeyExA
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
IsIconic
InsertMenuItemA
CreatePopupMenu
GetClassInfoA
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
PostMessageA
SetMenu
GetDesktopWindow
GetWindow
ShowWindow
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetClientRect
GetWindowLongA
SetWindowLongA
IsWindow
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
GetActiveWindow
DrawMenuBar
CreateWindowExA
GetParent
GetMenuItemCount
GetSubMenu
GetMenuItemID
DefMDIChildProcA
SendMessageA
GetMenu
DefFrameProcA
wsprintfA
UpdateWindow
EnableWindow
InvalidateRect
GetWindowRect
ValidateRect
gdi32
Rectangle
GetCurrentObject
CreateDIBSection
CreateRectRgnIndirect
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateEllipticRgn
LPtoDP
Ellipse
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
CreatePolygonRgn
Polyline
Polygon
GetViewportOrgEx
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
OffsetRgn
SetPixel
SetDIBColorTable
GetDIBits
StretchBlt
RoundRect
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
ExtTextOutA
TextOutA
RectVisible
EndDoc
AbortDoc
PtVisible
SetAbortProc
Escape
EndPage
StartPage
DPtoLP
StretchDIBits
CreateFontA
GetCharWidthA
GetTextExtentPoint32A
GetTextMetricsA
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetPixel
BitBlt
CreateRoundRectRgn
CreateFontIndirectA
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetLayout
GetLayout
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
CreateCompatibleDC
CreateCompatibleBitmap
PatBlt
SelectObject
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
GetJobA
ClosePrinter
advapi32
RegDeleteKeyA
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey
RegCloseKey
RegSetValueA
RegEnumKeyExA
RegOpenKeyExW
RegEnumValueA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
CryptReleaseContext
shell32
SHGetMalloc
DragFinish
DragQueryFileA
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
SHAppBarMessage
ShellExecuteExA
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
comctl32
InitCommonControlsEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx
shlwapi
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathStripPathA
PathRemoveFileSpecW
ole32
CoLockObjectExternal
GetRunningObjectTable
OleIsRunning
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
CoGetMalloc
OleSetContainedObject
GetHGlobalFromILockBytes
OleLoad
OleCreate
DoDragDrop
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetClipboard
OleSetMenuDescriptor
OleSaveToStream
WriteClassStm
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
PropVariantCopy
CoUninitialize
CoCreateInstance
CoInitialize
CoDisconnectObject
StringFromGUID2
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleRegGetUserType
WriteClassStg
CreateILockBytesOnHGlobal
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
CoInitializeEx
OleRegEnumVerbs
OleRegGetMiscStatus
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
StgCreateDocfile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleRun
RevokeDragDrop
RegisterDragDrop
OleQueryLinkFromData
OleQueryCreateFromData
OleCreateFromFile
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleLockRunning
OleSave
oleaut32
VariantClear
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantCopy
oledlg
ord8
wldap32
ord22
ord211
ord143
ord60
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord33
ord301
ord27
ord41
ord46
ws2_32
WSACleanup
WSASetLastError
__WSAFDIsSet
WSAGetLastError
select
recv
send
WSAIoctl
setsockopt
getsockname
ntohs
bind
htons
getsockopt
getpeername
closesocket
socket
connect
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
gethostname
ntohl
htonl
WSAStartup
crypt32
CertFreeCertificateContext
gdiplus
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipFree
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 479KB - Virtual size: 479KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 374KB - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ