Static task
static1
Behavioral task
behavioral1
Sample
5165fe6b7c95f8171119588d7fdca87eb0e84e1039f88dcfafebe0138ccc1361.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5165fe6b7c95f8171119588d7fdca87eb0e84e1039f88dcfafebe0138ccc1361.exe
Resource
win10v2004-20230703-en
General
-
Target
5165fe6b7c95f8171119588d7fdca87eb0e84e1039f88dcfafebe0138ccc1361
-
Size
7.3MB
-
MD5
ae6aea56bdda4f4cb28618d17c4534d3
-
SHA1
005e032a5e7aa0247ec56334cf0ad8dcd3f9ee09
-
SHA256
5165fe6b7c95f8171119588d7fdca87eb0e84e1039f88dcfafebe0138ccc1361
-
SHA512
a4b7eec212bec3b7008252f3206107e570de6d2a06eaae694acfa7092b2a5d9bcb4e3cffa3e0792ca37b7ed48b18b01320ef3a262be94218bd96edbb7a753fd1
-
SSDEEP
49152:j4oC2iClu1Pg4tnWG+1Wls2JlwxJWZsu+Co5WlI5QZetXJwEXUeTKAE/4de5IG7F:MoinCGRlAB5qTt7Zk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5165fe6b7c95f8171119588d7fdca87eb0e84e1039f88dcfafebe0138ccc1361
Files
-
5165fe6b7c95f8171119588d7fdca87eb0e84e1039f88dcfafebe0138ccc1361.exe windows x86
4df8294a4c7456ce5c30dbf932655dc7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
FindResourceW
WideCharToMultiByte
LCMapStringA
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
SizeofResource
HeapSize
GetProcessHeap
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
OutputDebugStringA
SetLastError
FreeResource
LoadResource
LockResource
HeapFree
CreateSemaphoreA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
FindResourceA
GlobalAlloc
GlobalSize
LocalFree
MulDiv
FormatMessageA
CopyFileA
EncodePointer
GetCurrentThreadId
GetSystemDirectoryW
FreeLibrary
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
LoadLibraryA
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
SetThreadPriority
SetEnvironmentVariableA
CreateFileW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetStringTypeW
HeapQueryInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
IsValidCodePage
WaitForSingleObjectEx
SetConsoleCtrlHandler
CreateSemaphoreW
TerminateProcess
CreateEventW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetStartupInfoW
FatalAppExitA
SetStdHandle
GetSystemTimeAsFileTime
WriteConsoleW
OutputDebugStringW
GetFileType
GetStdHandle
ExitThread
CreateThread
AreFileApisANSI
ExitProcess
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapValidate
GetCommandLineA
RtlUnwind
GetModuleHandleExW
IsProcessorFeaturePresent
IsDebuggerPresent
LocalUnlock
LocalLock
SearchPathA
Sleep
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
lstrcpyA
GetTickCount
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
MultiByteToWideChar
WaitForMultipleObjects
CreateMutexA
ReleaseMutex
ReleaseSemaphore
FindResourceExW
GetWindowsDirectoryA
GetStringTypeExA
GetVolumeInformationA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
DeleteFileA
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
PulseEvent
ResetEvent
GetThreadPriority
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
VirtualProtect
GetProfileIntA
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
SetErrorMode
GlobalFlags
GetACP
LeaveCriticalSection
EnterCriticalSection
GetAtomNameA
GetCurrentProcessId
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
lstrcmpA
GetVersionExA
GetCurrentThread
ResumeThread
SuspendThread
user32
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
GetIconInfo
DrawIconEx
RegisterClipboardFormatA
UnionRect
MsgWaitForMultipleObjectsEx
MessageBeep
IsRectEmpty
CopyAcceleratorTableA
CharNextA
ReuseDDElParam
GetMenuBarInfo
LoadImageA
TranslateAcceleratorA
LoadAcceleratorsA
CharUpperA
DestroyIcon
LoadAcceleratorsW
WaitMessage
IntersectRect
UnpackDDElParam
GetClipboardFormatNameA
CopyImage
SystemParametersInfoA
DestroyMenu
GetAsyncKeyState
InflateRect
ReleaseCapture
SetRectEmpty
OffsetRect
SetRect
RealChildWindowFromPoint
GetDialogBaseUnits
LoadBitmapA
CheckMenuRadioItem
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
GetMenuContextHelpId
SetMenuContextHelpId
ScrollDC
ExcludeUpdateRgn
WindowFromDC
GetTabbedTextExtentA
DrawStateA
GrayStringA
DrawTextExA
DrawTextA
DrawIcon
GetMenuDefaultItem
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
DeleteMenu
ModifyMenuA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuIndirectA
LoadMenuW
LoadMenuA
DrawFrameControl
DrawEdge
GetWindowThreadProcessId
SetCursor
GetCursorPos
TranslateMessage
GetMessageA
GetKeyNameTextA
PostQuitMessage
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
NotifyWinEvent
ArrangeIconicWindows
DlgDirSelectComboBoxExA
DlgDirListComboBoxA
DlgDirSelectExA
DlgDirListA
LoadCursorW
LoadCursorA
GetLastActivePopup
FindWindowExA
FindWindowA
SetParent
GetComboBoxInfo
ChildWindowFromPoint
WindowFromPoint
ClientToScreen
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetWindowContextHelpId
SetWindowContextHelpId
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
ValidateRgn
InvalidateRgn
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRgn
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDCEx
GetDC
SetForegroundWindow
GetForegroundWindow
UpdateWindow
DragDetect
GetSystemMenu
DrawMenuBar
HiliteMenuItem
KillTimer
SetTimer
SetCapture
GetOpenClipboardWindow
ChangeClipboardChain
GetClipboardViewer
SetClipboardViewer
GetClipboardOwner
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
PostThreadMessageA
SendNotifyMessageA
DrawAnimatedRects
DrawCaption
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetTopWindow
GetClassNameA
GetParent
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropA
GetPropA
SetPropA
GetScrollRange
SetScrollRange
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
SetCursorPos
SetClassLongA
GetDoubleClickTime
CopyIcon
CharUpperBuffA
EnumChildWindows
IsClipboardFormatAvailable
InSendMessage
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
DestroyCursor
GetTabbedTextExtentW
ChildWindowFromPointEx
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetFocus
GetWindow
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
MapDialogRect
TabbedTextOutA
PostMessageA
SendMessageA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
IsMenu
GetDesktopWindow
GetWindowLongA
SetActiveWindow
IsWindowEnabled
EnableWindow
GetActiveWindow
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindow
UnregisterClassA
GetSystemMetrics
MapVirtualKeyA
keybd_event
MessageBoxA
SetMenuDefaultItem
gdi32
CombineRgn
CreateBitmapIndirect
CreateBrushIndirect
CreateCompatibleBitmap
CreateDiscardableBitmap
CreateCompatibleDC
CreateDIBPatternBrushPt
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateFontIndirectA
CreateFontA
CreateHatchBrush
CreateICA
CreatePalette
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DrawEscape
Ellipse
EnumObjects
EqualRgn
Escape
ExtEscape
ExtCreateRegion
ExtFloodFill
FillRgn
FloodFill
FrameRgn
GetROP2
GetAspectRatioFilterEx
GetBkColor
GetBkMode
GetBitmapBits
GetBitmapDimensionEx
GetBoundsRect
GetBrushOrgEx
GetCharWidthA
GetCharWidthFloatA
GetCharABCWidthsA
GetCharABCWidthsFloatA
GetCurrentObject
GetCurrentPositionEx
GetFontData
GetGlyphOutlineA
GetGraphicsMode
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOutlineTextMetricsA
GetPaletteEntries
GetPixel
GetPolyFillMode
GetRegionData
GetRgnBox
GetStockObject
GetStretchBltMode
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextExtentPoint32A
GetFontLanguageInfo
GetCharacterPlacementA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
InvertRgn
MaskBlt
PlgBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PolyPolygon
PtInRegion
PtVisible
RectInRegion
RectVisible
Rectangle
ResetDCA
RealizePalette
RoundRect
ResizePalette
SelectObject
SetBitmapBits
SetBoundsRect
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
UpdateColors
PlayEnhMetaFile
Chord
GetTextMetricsA
AngleArc
PolyPolyline
GetWorldTransform
GetColorAdjustment
CreateHalftonePalette
StartDocA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetPath
PathToRegion
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
ExtCreatePen
GetMiterLimit
GetArcDirection
TextOutA
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetBitmapDimensionEx
SetBrushOrgEx
GetTextFaceA
GetKerningPairsA
UnrealizeObject
DeleteDC
DeleteObject
ExcludeClipRect
GetClipBox
GetClipRgn
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
StretchDIBits
EnumFontFamiliesExA
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
CreateDIBSection
SetDIBColorTable
DeleteMetaFile
GetTextExtentPointA
GetTextExtentPoint32W
BitBlt
Arc
AnimatePalette
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
ExtTextOutA
CreateEnhMetaFileA
CloseEnhMetaFile
CreateMetaFileA
CloseMetaFile
GetDeviceCaps
CreateDCA
CopyMetaFileA
GdiComment
msimg32
AlphaBlend
GradientFill
TransparentBlt
winspool.drv
GetJobA
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
SetFileSecurityA
GetFileSecurityA
RegEnumKeyExA
RegOpenKeyExW
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCloseKey
shell32
SHGetMalloc
DragAcceptFiles
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
DragFinish
SHGetPathFromIDListA
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
DragQueryFileA
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
shlwapi
PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathFindExtensionA
StrFormatKBSizeA
uxtheme
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeParentBackground
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
CloseThemeData
DrawThemeBackground
OpenThemeData
ole32
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
PropVariantCopy
OleRun
CoRevokeClassObject
CoRegisterClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
StringFromGUID2
CoDisconnectObject
CoInitializeEx
CLSIDFromProgID
CreateOleAdviseHolder
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CreateDataAdviseHolder
GetRunningObjectTable
OleRegEnumVerbs
OleRegGetMiscStatus
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleSetMenuDescriptor
OleQueryCreateFromData
OleQueryLinkFromData
OleLoad
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoGetMalloc
GetHGlobalFromILockBytes
OleGetIconOfClass
OleLockRunning
OleIsRunning
OleSetContainedObject
OleSaveToStream
OleSave
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
WriteClassStm
StgIsStorageILockBytes
OleGetClipboard
DoDragDrop
CreateItemMoniker
CreateFileMoniker
GetClassFile
CreateGenericComposite
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CLSIDFromString
CreateStreamOnHGlobal
oleaut32
SafeArrayGetElemsize
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysStringLen
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetDim
SysFreeString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetLBound
SysAllocString
oledlg
ord9
ord7
ord6
ord5
ord4
ord3
ord8
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
gdiplus
GdipFree
GdipAlloc
GdipGetImageHeight
GdiplusStartup
GdipCloneImage
GdipGetImagePalette
GdipGetImagePaletteSize
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageWidth
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipCreateFromHDC
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 803KB - Virtual size: 803KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 310KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ