Static task
static1
Behavioral task
behavioral1
Sample
1d4efe910b28fd6cebe984a70bb474ebe9779eb7a24da64cf5629a41d0cbc82a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1d4efe910b28fd6cebe984a70bb474ebe9779eb7a24da64cf5629a41d0cbc82a.exe
Resource
win10v2004-20230703-en
General
-
Target
1d4efe910b28fd6cebe984a70bb474ebe9779eb7a24da64cf5629a41d0cbc82a
-
Size
14.0MB
-
MD5
c2b63c6810887174e5b2e1f5304d2562
-
SHA1
c035558762ac0f49366d0d8d8826441302178adf
-
SHA256
1d4efe910b28fd6cebe984a70bb474ebe9779eb7a24da64cf5629a41d0cbc82a
-
SHA512
9f8012c9e05dc6c97b78c932ae479118831f44be23703f20a5df292dacd0b09af77b7870e8a83583535e027fc2d85ec966803e366f664387a7ec324f24a398a0
-
SSDEEP
98304:kE07exJkskQVq1Fy1s01FPY+EKk7YdZT+yV/pHHEFLOAkGkzdnEVomFHKnP:5B1YYdRj/1HEFLOyomFHKnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d4efe910b28fd6cebe984a70bb474ebe9779eb7a24da64cf5629a41d0cbc82a
Files
-
1d4efe910b28fd6cebe984a70bb474ebe9779eb7a24da64cf5629a41d0cbc82a.exe windows x64
7f95e4e021df36b8ec61a92191b48048
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrlenW
SetEnvironmentVariableA
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
MultiByteToWideChar
GetConsoleCP
GetTimeZoneInformation
GetStringTypeW
HeapQueryInformation
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
SetFilePointerEx
ReadConsoleW
GetConsoleMode
CreatePipe
GetExitCodeProcess
WaitForSingleObjectEx
SetConsoleCtrlHandler
FatalAppExitA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
SetStdHandle
WriteConsoleW
OutputDebugStringW
GetFileType
GetStdHandle
VirtualQuery
VirtualAlloc
GetSystemTimeAsFileTime
AreFileApisANSI
ExitProcess
GetModuleFileNameA
ExitThread
CreateThread
GetSystemInfo
HeapValidate
CreateProcessA
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineW
LocalUnlock
LocalLock
GetUserDefaultLCID
ReplaceFileW
GetDiskFreeSpaceW
SetFileTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetTickCount
SearchPathW
GetWindowsDirectoryW
CreateSemaphoreW
WaitForMultipleObjects
CreateMutexW
ReleaseMutex
ReleaseSemaphore
FindResourceExW
GetTempPathW
GetTempFileNameW
GetFileAttributesW
GetStringTypeExW
MoveFileW
lstrcmpiW
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
lstrlenA
DeleteFileW
GetCurrentDirectoryW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
PulseEvent
ResetEvent
GlobalFlags
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
VirtualProtect
GetProfileIntW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetAtomNameW
VerifyVersionInfoW
VerSetConditionMask
SetErrorMode
lstrcpyW
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetVersionExW
GetCurrentThread
CreateEventW
WaitForSingleObject
SetEvent
ResumeThread
SuspendThread
GetThreadPriority
SetThreadPriority
GlobalGetAtomNameW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetProcAddress
GetModuleHandleExW
OutputDebugStringA
CopyFileW
FormatMessageW
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
RaiseException
DecodePointer
LocalFree
IsDBCSLeadByte
GetPrivateProfileStringW
WideCharToMultiByte
GetModuleFileNameW
FindResourceW
SizeofResource
LockResource
LoadResource
GetLocalTime
OpenProcess
TerminateProcess
GetCurrentProcess
Sleep
GetLastError
CloseHandle
CreateFileW
user32
SetCursorPos
EmptyClipboard
SetClipboardData
CloseClipboard
CopyAcceleratorTableW
CharNextW
WaitMessage
ReuseDDElParam
GetMenuBarInfo
LoadImageW
TranslateAcceleratorW
DestroyIcon
LoadAcceleratorsW
MonitorFromPoint
UnionRect
UpdateLayeredWindow
MessageBeep
CharUpperW
TrackMouseEvent
GetDialogBaseUnits
UnpackDDElParam
GetClipboardFormatNameW
GetClipboardFormatNameA
CopyImage
RealChildWindowFromPoint
DestroyMenu
GetAsyncKeyState
ReleaseCapture
SetRect
EnumDisplayMonitors
SystemParametersInfoW
SetRectEmpty
SetLayeredWindowAttributes
DrawIconEx
IsRectEmpty
OffsetRect
GetWindowThreadProcessId
SetCursor
PostQuitMessage
TranslateMessage
GetMessageW
SendDlgItemMessageA
IntersectRect
InflateRect
MapVirtualKeyW
GetKeyNameTextW
EndDialog
CreateDialogIndirectParamW
NotifyWinEvent
ArrangeIconicWindows
DlgDirSelectComboBoxExW
DlgDirListComboBoxW
DlgDirSelectExW
DlgDirListW
LoadCursorW
GetLastActivePopup
FindWindowExW
FindWindowW
SetParent
GetDesktopWindow
ChildWindowFromPointEx
ChildWindowFromPoint
WindowFromPoint
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetWindowContextHelpId
SetWindowContextHelpId
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
ValidateRgn
InvalidateRgn
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRgn
GetUpdateRect
GetDCEx
SetForegroundWindow
GetForegroundWindow
UpdateWindow
DragDetect
GetSystemMenu
DrawMenuBar
HiliteMenuItem
KillTimer
SetTimer
SetCapture
GetActiveWindow
GetOpenClipboardWindow
ChangeClipboardChain
GetClipboardViewer
SetClipboardViewer
GetClipboardOwner
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
GetDoubleClickTime
BringWindowToTop
IsIconic
IsWindowVisible
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
PostThreadMessageW
SendNotifyMessageW
DrawAnimatedRects
DrawCaption
IsDialogMessageW
SetWindowTextW
ScrollWindowEx
IsWindowEnabled
EnableWindow
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMenuCheckMarkDimensions
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetParent
GetClassLongPtrW
GetClassLongW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
MessageBoxW
GetCursorPos
GetSystemMetrics
UnregisterClassW
GetClassNameW
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
CopyRect
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
GetIconInfo
CopyIcon
DestroyAcceleratorTable
SetClassLongPtrW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
MsgWaitForMultipleObjectsEx
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
IsCharLowerW
MapVirtualKeyExW
DefFrameProcW
BeginPaint
ReleaseDC
DefMDIChildProcW
TranslateMDISysAccel
InSendMessage
GetComboBoxInfo
DestroyCursor
EnumChildWindows
IsZoomed
LoadBitmapW
IsMenu
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
SendMessageW
PostMessageW
IsWindow
TabbedTextOutW
MapDialogRect
DrawEdge
DrawFrameControl
LoadMenuW
LoadMenuIndirectW
CreateMenu
CreatePopupMenu
CheckMenuItem
EnableMenuItem
ModifyMenuW
DeleteMenu
SetMenuItemBitmaps
InsertMenuItemW
GetMenuItemInfoW
SetMenuItemInfoW
GetMenuDefaultItem
SetMenuDefaultItem
DrawIcon
DrawTextW
DrawTextExW
GrayStringW
DrawStateW
GetTabbedTextExtentW
WindowFromDC
ExcludeUpdateRgn
ScrollDC
SetMenuContextHelpId
GetMenuContextHelpId
GetSysColorBrush
DrawFocusRect
FillRect
FrameRect
InvertRect
CheckMenuRadioItem
GetDC
GetWindowDC
SubtractRect
gdi32
GetPixel
GetPolyFillMode
GetRegionData
GetRgnBox
GetStretchBltMode
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextExtentPoint32W
GetFontLanguageInfo
GetCharacterPlacementW
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
InvertRgn
MaskBlt
PlgBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PolyPolygon
PtInRegion
PtVisible
RectInRegion
RectVisible
Rectangle
ResetDCW
RealizePalette
RoundRect
ResizePalette
SelectObject
SetBitmapBits
SetBoundsRect
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
UpdateColors
PlayEnhMetaFile
GdiComment
GetTextMetricsW
AngleArc
PolyPolyline
GetWorldTransform
GetColorAdjustment
CreateHalftonePalette
StartDocW
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetPath
PathToRegion
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
ExtCreatePen
GetMiterLimit
GetArcDirection
TextOutW
GetPaletteEntries
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetBitmapDimensionEx
SetBrushOrgEx
GetTextFaceW
GetKerningPairsW
UnrealizeObject
ExcludeClipRect
GetClipBox
GetClipRgn
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
StretchDIBits
CreateDIBSection
GetDIBits
SetDIBColorTable
EnumFontFamiliesExW
GetSystemPaletteEntries
DeleteMetaFile
GetTextExtentPointW
GetBkColor
GetAspectRatioFilterEx
GetROP2
FrameRgn
GetOutlineTextMetricsW
GetObjectType
GetNearestPaletteIndex
GetNearestColor
GetMapMode
GetGraphicsMode
GetGlyphOutlineW
GetFontData
GetCurrentPositionEx
GetCurrentObject
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCharWidthFloatW
GetCharWidthW
GetBrushOrgEx
GetBoundsRect
GetBitmapDimensionEx
GetBitmapBits
CreatePolygonRgn
AnimatePalette
FloodFill
FillRgn
ExtFloodFill
ExtCreateRegion
ExtEscape
Escape
EqualRgn
EnumObjects
Ellipse
DrawEscape
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
ExtTextOutW
CreateEnhMetaFileW
CreatePatternBrush
CreatePolyPolygonRgn
CreatePenIndirect
CreatePen
CreatePalette
CreateICW
CloseEnhMetaFile
CreateMetaFileW
CloseMetaFile
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetObjectW
GetStockObject
DeleteObject
DeleteDC
Arc
BitBlt
Chord
CombineRgn
CreateBitmap
CreateBitmapIndirect
CreateBrushIndirect
CreateCompatibleBitmap
CreateDiscardableBitmap
CreateCompatibleDC
CreateDIBPatternBrushPt
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateFontIndirectW
CreateFontW
CreateHatchBrush
GetBkMode
msimg32
AlphaBlend
GradientFill
TransparentBlt
winspool.drv
GetJobW
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegDeleteValueW
SetFileSecurityW
GetFileSecurityW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
OpenProcessToken
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueW
RegCloseKey
LookupPrivilegeValueW
AdjustTokenPrivileges
shell32
DragQueryFileW
DragAcceptFiles
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
ShellExecuteExW
SHAppBarMessage
DragFinish
ShellExecuteW
SHGetFileInfoW
ExtractIconW
SHAddToRecentDocs
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
StrFormatKBSizeW
uxtheme
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeParentBackground
IsAppThemed
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
GetThemeSysColor
GetWindowTheme
OpenThemeData
ole32
CoRegisterClassObject
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoInitializeEx
StringFromGUID2
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
SetConvertStg
OleRegGetUserType
OleCreateLinkToFile
OleDuplicateData
ReadFmtUserTypeStg
CoRevokeClassObject
WriteClassStg
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleRun
CoInitialize
CoCreateInstance
CoUninitialize
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
WriteClassStm
CreateItemMoniker
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
PropVariantCopy
CoFreeUnusedLibraries
OleInitialize
CreateGenericComposite
CreateOleAdviseHolder
CreateDataAdviseHolder
GetRunningObjectTable
GetClassFile
OleQueryCreateFromData
OleQueryLinkFromData
OleRegEnumVerbs
OleRegGetMiscStatus
CoRegisterMessageFilter
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLoad
CreateFileMoniker
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoGetMalloc
OleSetMenuDescriptor
GetHGlobalFromILockBytes
OleGetIconOfClass
OleLockRunning
OleSetContainedObject
OleIsRunning
OleSaveToStream
OleSave
WriteFmtUserTypeStg
OleCreateFromFile
StgIsStorageILockBytes
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
ReleaseStgMedium
OleUninitialize
oleaut32
VariantInit
VariantClear
VariantCopy
SysAllocStringLen
SysStringLen
SafeArrayGetDim
SafeArrayGetElemsize
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
CreateErrorInfo
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
SysStringByteLen
SysFreeString
SysAllocString
SafeArrayDestroyData
GetErrorInfo
SetErrorInfo
VariantChangeType
oledlg
OleUIUpdateLinksW
OleUIConvertW
OleUIChangeIconW
OleUIEditLinksW
OleUIPasteSpecialW
OleUIInsertObjectW
OleUIBusyW
gdiplus
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapUnlockBits
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImagePixelFormat
GdipDrawImageRectI
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundW
Sections
.text Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ