Static task
static1
Behavioral task
behavioral1
Sample
3ae2737571dcd0fa6dbf0c17e8fcedcddf37df6306e855af0d333d60db8d0349.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3ae2737571dcd0fa6dbf0c17e8fcedcddf37df6306e855af0d333d60db8d0349.exe
Resource
win10v2004-20230703-en
General
-
Target
3ae2737571dcd0fa6dbf0c17e8fcedcddf37df6306e855af0d333d60db8d0349
-
Size
8.8MB
-
MD5
84d869c982a57834bd67e5c5fb6c24dc
-
SHA1
b9ccee746fdff2bb84a91883cae222cf5c5ec557
-
SHA256
3ae2737571dcd0fa6dbf0c17e8fcedcddf37df6306e855af0d333d60db8d0349
-
SHA512
c864fa92387b8f1f2c797cd813f7f181b8dff4d85dd969e78f0456fd7fc8ca1c6fc2066214448742081d85bb4197983c52da0f16b4eecc2af1576a11bec304f6
-
SSDEEP
98304:H4bBLggjYhJ3mps+gUNswhhkzK0fFVqvZrkHs7MyJJ1raZfaeb:H4bBLgvypZB8c7wcg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ae2737571dcd0fa6dbf0c17e8fcedcddf37df6306e855af0d333d60db8d0349
Files
-
3ae2737571dcd0fa6dbf0c17e8fcedcddf37df6306e855af0d333d60db8d0349.exe windows x86
885accc1ba44d4c0e60cd615bd3cf8a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
Module32Next
Module32First
GetLogicalProcessorInformation
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetLastError
CloseHandle
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetVersionExW
VirtualFree
SetProcessAffinityMask
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
GetThreadTimes
SetEvent
WaitForSingleObject
CreateEventA
Sleep
SetThreadPriority
OpenProcess
TryEnterCriticalSection
GetExitCodeThread
GetNativeSystemInfo
GetTickCount
GetCurrentDirectoryW
GetVolumeInformationA
GetProcessHeap
LoadLibraryW
GetSystemInfo
Process32First
Process32Next
GetPrivateProfileStringA
lstrlenA
GlobalFree
GetModuleFileNameA
CreateMutexA
ReleaseMutex
DeleteFileA
GetCurrentDirectoryA
FindNextFileA
CreateToolhelp32Snapshot
FindFirstFileA
HeapQueryInformation
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
HeapFree
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetFileSizeEx
FindClose
GetCurrentThread
HeapCompact
UnlockFileEx
LockFileEx
GetTimeZoneInformation
CreateProcessW
HeapSize
GetTempPathW
FlushFileBuffers
SetFilePointerEx
SetStdHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
VirtualQuery
VirtualProtect
VirtualAlloc
WriteConsoleW
GetDriveTypeW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
LoadLibraryExW
RtlUnwind
RaiseException
InterlockedFlushSList
InterlockedPushEntrySList
GetStdHandle
ExpandEnvironmentStringsW
FlushViewOfFile
GetACP
SetConsoleCtrlHandler
QueryPerformanceFrequency
GenerateConsoleCtrlEvent
SystemTimeToFileTime
MoveFileW
MoveFileA
GetVersion
GetSystemTime
CreateProcessA
GetExitCodeProcess
GetProcessTimes
CreatePipe
DuplicateHandle
SetFileTime
SetFileAttributesW
RemoveDirectoryW
GetFullPathNameW
GetFileType
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesExA
GetFileAttributesW
FindNextFileW
FindFirstFileW
DeleteFileW
CreateDirectoryW
SetCurrentDirectoryW
SetCurrentDirectoryA
SetEnvironmentVariableW
SetEnvironmentVariableA
GetEnvironmentVariableA
GetFullPathNameA
SetEndOfFile
IsDBCSLeadByte
GetFileAttributesA
GetConsoleOutputCP
GetConsoleCP
OutputDebugStringW
FormatMessageA
LocalFree
WaitNamedPipeW
PeekNamedPipe
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
InitializeSListHead
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
DecodePointer
EncodePointer
GetStringTypeW
FormatMessageW
FindResourceW
FindResourceA
SizeofResource
LoadResource
LockResource
IsProcessorFeaturePresent
InterlockedDecrement
HeapValidate
InterlockedIncrement
QueryPerformanceCounter
CreateSemaphoreA
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
WideCharToMultiByte
lstrlenW
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GetSystemDirectoryA
GetModuleHandleA
WriteFile
SetFilePointer
ReadFile
GetModuleFileNameW
GetCurrentThreadId
SetUnhandledExceptionFilter
CreateFileW
CreateFileMappingA
UnmapViewOfFile
GetConsoleMode
SetFileAttributesA
MapViewOfFile
GetFileSize
CreateFileA
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
CreateDirectoryA
AllocConsole
RtlCaptureStackBackTrace
OutputDebugStringA
GlobalAlloc
EnumSystemLocalesW
HeapAlloc
user32
LoadStringA
MessageBoxA
CharPrevA
CharPrevExA
CharNextExA
CharNextW
GetClipboardData
GetAsyncKeyState
PeekMessageA
CloseClipboard
OpenClipboard
GetKeyboardLayout
GetKeyboardLayoutNameA
DispatchMessageA
TranslateMessage
GetMessageA
LoadCursorA
AdjustWindowRectEx
GetWindowRect
SetWindowTextA
GetMenu
DefWindowProcA
RegisterClassA
SetWindowLongA
GetDC
ReleaseDC
BeginPaint
EndPaint
GetSystemMetrics
GetClientRect
ClientToScreen
FillRect
SetRect
OffsetRect
SetWindowPos
GetCursorPos
ScreenToClient
FindWindowA
LoadIconA
SystemParametersInfoA
GetKeyState
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ShowWindow
GetCapture
SetCapture
GetWindowLongA
UpdateWindow
SetFocus
MoveWindow
DestroyWindow
IsWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
InvalidateRect
ReleaseCapture
ChangeDisplaySettingsA
gdi32
TextOutA
GetTextExtentPoint32A
CreateDIBSection
SetDIBitsToDevice
SetBkMode
DeleteDC
CreateCompatibleDC
TextOutW
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32W
GetCharABCWidthsFloatW
CreateFontIndirectA
GetStockObject
EnumFontFamiliesExA
StretchBlt
PatBlt
DeleteObject
CreateSolidBrush
shell32
SHGetSpecialFolderPathA
ShellExecuteW
ShellExecuteA
ole32
OleInitialize
CoGetClassObject
CoCreateInstance
OleUninitialize
OleSetContainedObject
CoUninitialize
CoInitialize
CoInitializeEx
winmm
timeEndPeriod
timeGetTime
timeGetDevCaps
timeBeginPeriod
d3d8
Direct3DCreate8
iphlpapi
GetPerAdapterInfo
GetAdaptersInfo
devil
ilBindImage
ilConvertImage
ilCopyPixels
ilDeleteImages
ilEnable
ilGenImages
ilGetInteger
ilLoad
ilOriginFunc
ilShutDown
ilSave
ilSetPixels
ilTexImage
ilInit
imm32
ImmNotifyIME
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmGetIMEFileNameA
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmAssociateContext
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
granny2
_GrannyFindTrackGroupForModel@12
_GrannyGetSourceModel@4
_GrannyGetMeshIndexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshVertexCount@4
_GrannyGetTotalTypeSize@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetWorldPose4x4@8
_GrannyFreeWorldPose@4
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannyInstantiateModel@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyGetControlSpeed@4
_GrannyCompleteControlAt@8
_GrannyFreeControl@4
_GrannySetControlEaseIn@8
_GrannySetControlEaseInCurve@28
_GrannySetControlEaseOut@8
_GrannySetControlEaseOutCurve@28
_GrannyGetControlRawLocalClock@4
_GrannySetControlRawLocalClock@8
_GrannyPlayControlledAnimation@12
_GrannyBeginControlledAnimation@8
_GrannyEndControlledAnimation@4
_GrannySetTrackGroupTarget@12
_GrannySetTrackGroupLOD@16
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMeshVertexType@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshIndices@12
_GrannyNewMeshDeformer@16
_GrannyFreeMeshDeformer@4
_GrannyDeformVertices@24
GrannyPNT332VertexType
_GrannyControlIsComplete@4
_GrannyGetControlLocalDuration@4
_GrannyFreeControlOnceUnused@4
_GrannySetControlSpeed@8
_GrannyFreeLocalPose@4
_GrannyNewLocalPose@4
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannySetModelClock@8
_GrannyGetSourceSkeleton@4
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyReadEntireFileFromMemory@8
_GrannyConvertSingleObject@20
_GrannyFindMatchingMember@16
_GrannyGetMaterialTextureByType@8
_GrannySetLogCallback@4
_GrannyGetMeshTriangleGroups@4
_GrannyFreeControlIfComplete@4
mss32
_AIL_file_type@8
_AIL_decompress_ASI@24
_AIL_set_file_callbacks@16
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_enumerate_3D_providers@12
_AIL_open_3D_provider@4
_AIL_decompress_ADPCM@12
_AIL_mem_free_lock@4
_AIL_file_read@8
_RIB_load_application_providers@4
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_auto_update_3D_position@8
_AIL_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_pause_stream@8
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_last_error@0
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_end_3D_sample@4
_AIL_set_3D_sample_file@8
_AIL_set_3D_sample_volume@8
_AIL_WAV_info@8
speedtreert
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
??0SGeometry@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
??1STextures@CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1CSpeedTreeRT@@QAE@XZ
??2CSpeedTreeRT@@SAPAXI@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
??3CSpeedTreeRT@@SAXPAX@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
??0STextures@CSpeedTreeRT@@QAE@XZ
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
dinput8
DirectInput8Create
ws2_32
ioctlsocket
connect
closesocket
__WSAFDIsSet
recv
select
send
socket
WSAStartup
WSACleanup
htonl
htons
WSAIoctl
WSASetLastError
getprotobyname
getservbyname
getservbyport
WSAGetLastError
gethostbyaddr
shutdown
setsockopt
sendto
recvfrom
listen
inet_ntoa
getsockopt
getsockname
getpeername
bind
accept
gethostname
gethostbyname
ntohs
ntohl
inet_addr
ddraw
DirectDrawCreate
dbghelp
MiniDumpWriteDump
advapi32
RegDeleteValueA
CryptReleaseContext
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegConnectRegistryA
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
CryptGenRandom
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegLoadKeyA
RegQueryInfoKeyA
RegQueryValueA
RegSaveKeyA
RegSetValueA
RegSetValueExA
CryptAcquireContextA
oleaut32
SysFreeString
SysAllocString
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
VariantInit
VariantClear
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 807KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ