Static task
static1
Behavioral task
behavioral1
Sample
a97f2323e7823e140236dd312bd6272f9c9f717c0ad5c4ea88b18cc0c7958397.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a97f2323e7823e140236dd312bd6272f9c9f717c0ad5c4ea88b18cc0c7958397.exe
Resource
win10v2004-20230703-en
General
-
Target
a97f2323e7823e140236dd312bd6272f9c9f717c0ad5c4ea88b18cc0c7958397
-
Size
4.5MB
-
MD5
4cf32d55c0481612929267abd82a5bd2
-
SHA1
0240a234e44a2f10b2bcc093b853467edc037fc9
-
SHA256
a97f2323e7823e140236dd312bd6272f9c9f717c0ad5c4ea88b18cc0c7958397
-
SHA512
2ba88565f359a022a64d5162e231a893da2e5e6cbe5eff42583101fb84f9fe6a28e8c0a54de57da37430c1f9a977978a3eff4cbe9604982353c01014ee25f8e3
-
SSDEEP
98304:nU/TDovGokZsVg63evCm0969ionCKbGwLPzSF4pVT2E5:iKs+3evL0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a97f2323e7823e140236dd312bd6272f9c9f717c0ad5c4ea88b18cc0c7958397
Files
-
a97f2323e7823e140236dd312bd6272f9c9f717c0ad5c4ea88b18cc0c7958397.exe windows x64
4b25c30594288f447e799188a9bce484
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetCurrentDirectoryW
SetCurrentDirectoryW
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetDriveTypeW
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
WriteConsoleW
IsDebuggerPresent
HeapQueryInformation
GetFullPathNameW
GetFileType
SetStdHandle
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedFlushSList
InterlockedPushEntrySList
RtlPcToFileHeader
RtlUnwindEx
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
OutputDebugStringW
CreateFileW
InitializeSListHead
GetSystemTimeAsFileTime
GetStdHandle
CreateEventW
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LocalUnlock
LocalLock
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
GetStartupInfoW
SearchPathA
GetProfileIntA
GetTempPathA
FindResourceExW
VerifyVersionInfoA
VerSetConditionMask
SetErrorMode
GetWindowsDirectoryA
GetCPInfo
GetOEMCP
VirtualProtect
lstrcpyA
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
GetStringTypeExA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
GetVolumeInformationA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryA
GetACP
GlobalFlags
GetThreadLocale
SystemTimeToFileTime
GetAtomNameA
InitializeCriticalSectionAndSpinCount
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetSystemDirectoryW
EncodePointer
GlobalAddAtomA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
CompareStringA
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
GetCurrentThreadId
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
FindResourceA
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
OutputDebugStringA
GetCurrentProcessId
MultiByteToWideChar
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
SetLastError
SetEvent
InitializeCriticalSectionEx
QueryPerformanceCounter
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
DeleteFileA
GetPrivateProfileSectionA
_lclose
_lwrite
_lcreat
GlobalFree
GetModuleFileNameA
GetTickCount
GetLocalTime
Sleep
CreateEventA
WaitForSingleObject
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetVersionExA
DeviceIoControl
CloseHandle
CreateFileA
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
QueryPerformanceFrequency
ExitProcess
RtlUnwind
user32
IsRectEmpty
SetRect
InvalidateRgn
CopyAcceleratorTableA
CharNextA
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
CharUpperA
DestroyIcon
InvalidateRect
DeleteMenu
CopyImage
GetDialogBaseUnits
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
MapVirtualKeyA
GetKeyNameTextA
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetTopWindow
GetClassNameA
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
OffsetRect
CloseClipboard
SendDlgItemMessageA
GetWindowTextLengthA
GetWindowTextA
MessageBeep
SetScrollPos
SetFocus
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
IntersectRect
InflateRect
CopyRect
FillRect
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
TabbedTextOutA
SetClipboardData
EmptyClipboard
DrawStateA
DispatchMessageA
PeekMessageA
SendMessageA
IsIconic
MsgWaitForMultipleObjects
GrayStringA
DrawTextExA
DrawTextA
UnhookWindowsHookEx
MapDialogRect
GetWindow
SetWindowContextHelpId
SetWindowPos
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
TrackMouseEvent
LoadImageW
GetAsyncKeyState
CreatePopupMenu
GetMenuDefaultItem
BringWindowToTop
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
LoadImageA
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatA
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetTimer
KillTimer
EnableWindow
GetSystemMetrics
GetSystemMenu
AppendMenuA
DrawIcon
GetDC
GetClientRect
LoadIconW
UnregisterClassA
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
IsWindowEnabled
MessageBoxA
GetWindowLongA
GetParent
GetWindowThreadProcessId
GetLastActivePopup
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
IsWindow
DestroyWindow
CreateDialogIndirectParamA
EndDialog
IsZoomed
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
GetDesktopWindow
GetMessageA
TranslateMessage
IsWindowVisible
GetKeyState
SetClassLongPtrA
SetWindowRgn
SetParent
DrawEdge
GetNextDlgGroupItem
EnumDisplayMonitors
SetLayeredWindowAttributes
GetScrollPos
OpenClipboard
DrawFrameControl
GetTabbedTextExtentW
GetTabbedTextExtentA
DestroyCursor
GetWindowRgn
WindowFromDC
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageA
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
EnumChildWindows
GetDCEx
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
PostThreadMessageA
UnionRect
FrameRect
CopyIcon
SetCursorPos
LoadMenuW
SetRectEmpty
gdi32
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapperFlags
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
GetObjectA
MoveToEx
TextOutA
ExtTextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectA
CreateRectRgnIndirect
GetMapMode
ExcludeClipRect
SetRectRgn
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
GetBkColor
GetTextColor
GetRgnBox
CreateCompatibleBitmap
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
EnumFontFamiliesExA
CreateFontA
GetCharWidthA
StretchDIBits
Rectangle
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
CreateCompatibleDC
BitBlt
CreateBitmap
GetDeviceCaps
CreateDCA
PatBlt
SetGraphicsMode
CopyMetaFileA
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesA
GetJobA
OpenPrinterA
advapi32
GetFileSecurityA
SetFileSecurityA
RegEnumKeyExA
RegOpenKeyExW
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCloseKey
shell32
ExtractIconA
SHGetFileInfoA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
ShellExecuteA
SHGetMalloc
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
SHAddToRecentDocs
shlwapi
PathRemoveExtensionA
PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
StrFormatKBSizeA
PathIsUNCA
PathFindFileNameA
uxtheme
GetThemeSysColor
IsAppThemed
GetThemeColor
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
ole32
DoDragDrop
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
OleRegEnumVerbs
OleRegGetMiscStatus
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateFileMoniker
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
CoGetClassObject
PropVariantCopy
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
OleCreate
OleCreateFromData
CoFreeUnusedLibraries
OleRun
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoDisconnectObject
StringFromGUID2
CoInitializeEx
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleIsRunning
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
OleGetClipboard
oleaut32
RegisterTypeLi
SysStringLen
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
LoadRegTypeLi
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
SysAllocStringByteLen
SysAllocString
LoadTypeLi
VariantChangeType
VariantClear
SysStringByteLen
SysFreeString
SysAllocStringLen
SafeArrayLock
VariantInit
oledlg
ord8
rpcrt4
UuidCreateSequential
dtccm2
DisplayRGB24
SetLibConfig
ShowInternalStatusDialog
OS_Read
OS_Config
LC_OS_CommandConfig
FindAfDevice
WriteAfValue
InitRoi
InitIsp
InitDevice
CloseDevice
OpenDevice
PmuSetOcpHold
PmuSetOcpCurrentLimit
PmuSetOnOff
PmuSetSampleSpeed
CalibrateSensorPort
GetMipiCrcErrorCount
PmuSetRise
PmuGetCurrent
EnumerateDevice
GetDeviceSN
IsDevConnect
GetKitType
SetGamma
SetContrast
SetSaturation
SetDigitalGain
ImageProcess
SetRawFormat
SetYUV422Format
InitDisplay
ResetSensorI2cBus
SetI2CInterval
SetSensorI2cAckWait
SetSensorI2cRate
SetSensorI2cRapid
WriteSensorReg
ReadSensorReg
WriteSensorI2c
ReadSensorI2c
WriteSensorI2cEx
ReadSensorI2cEx
ezSensorI2cRw
SensorEnable
SetSensorClock
GetMipiClkFrequency
SetMipiClkPhase
SetMipiEnable
SetMipiImageVC
SetMipiCtrlEx
GetMipiCtrlEx
SetErrFrameFilter
GetErrFrameFilter
SetParaCtrl
GetParaCtrl
InitSensor
SetSoftPin
SetSoftPinPullUp
EnableSoftPin
EnableGpio
MasterSpiConfig
WriteSensorSPI
ReadSensorSPI
OpenVideo
CloseVideo
SetSensorPort
ResetSensorPort
GrabFrame
GrabFrameEx
CalculateGrabSize
GrabHold
GrabRestart
PmuSetVoltage
PmuSetCurrentRange
PmuSetOcpDelay
saveimage64
?SaveJpeg@SaveImage@@SAHPEAEHHPEBD@Z
gdiplus
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipDrawImageRectI
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromStreamICM
GdiplusStartup
GdipFree
GdiplusShutdown
GdipAlloc
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 997KB - Virtual size: 997KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ