Static task
static1
Behavioral task
behavioral1
Sample
25bc5232b4b245f08b45095fa6c38bb638c5b18dc991faf3193ba5188b635c9a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
25bc5232b4b245f08b45095fa6c38bb638c5b18dc991faf3193ba5188b635c9a.exe
Resource
win10v2004-20230703-en
General
-
Target
25bc5232b4b245f08b45095fa6c38bb638c5b18dc991faf3193ba5188b635c9a
-
Size
307KB
-
MD5
c9baed04b0884a3344c599e25d43b40c
-
SHA1
60862a3551f1ac552c104ff34a666d3fcaffb0ff
-
SHA256
25bc5232b4b245f08b45095fa6c38bb638c5b18dc991faf3193ba5188b635c9a
-
SHA512
86a2468359a344df63827e60ea8792ac932c017cbbb1b0793d5de908155e06debacaa5f889b882b876db69a0dd010b195d9e6e565f230cf4d2c887696a18eb2f
-
SSDEEP
6144:laLYWSnJt+vryRE24WPBhVvMlvyjB3p3FDlH6TDx/K:0s75fMlvyXCDx/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25bc5232b4b245f08b45095fa6c38bb638c5b18dc991faf3193ba5188b635c9a
Files
-
25bc5232b4b245f08b45095fa6c38bb638c5b18dc991faf3193ba5188b635c9a.exe windows x86
3544872209bfc01f303acd28b78bc547
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
msi
ord173
kernel32
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
FlushFileBuffers
GetModuleFileNameW
lstrcmpiW
LoadLibraryExW
InitializeCriticalSectionEx
RaiseException
SetThreadLocale
GetSystemDefaultLCID
lstrlenW
CreateThread
DecodePointer
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetExitCodeThread
WaitForSingleObject
OpenProcess
GetExitCodeProcess
CreateProcessW
GetCommandLineW
AddDllDirectory
CreateEventW
SetEvent
GlobalMemoryStatus
SetEnvironmentVariableW
SetCurrentDirectoryW
GetTimeFormatW
GetDateFormatW
GetUserDefaultLangID
VerifyVersionInfoW
VerSetConditionMask
CompareStringW
IsValidCodePage
FindFirstFileExW
LCMapStringW
Sleep
GetCommandLineA
GetStdHandle
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
GetOEMCP
GetCPInfo
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
GetConsoleOutputCP
WriteFile
ExpandEnvironmentStringsW
ReadFile
GetFileSize
CreateDirectoryW
DeleteFileW
GetConsoleMode
GetCurrentProcess
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
GetEnvironmentVariableW
GetFileType
RemoveDirectoryW
FindNextFileW
SetLastError
GetFullPathNameW
FindFirstFileW
FindClose
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
WriteConsoleW
user32
GetFocus
GetSysColor
IsWindowEnabled
DrawFocusRect
SetCapture
GetCapture
SetCursor
GetDlgCtrlID
GetCursorPos
ScreenToClient
PtInRect
FillRect
EndPaint
BeginPaint
TrackMouseEvent
ReleaseCapture
SetFocus
UpdateWindow
SetRectEmpty
GetClassNameW
LoadCursorW
SystemParametersInfoW
CreateWindowExW
GetWindowTextLengthW
GetWindowTextW
GetDC
ReleaseDC
DrawTextW
OffsetRect
IsWindow
CallWindowProcW
DefWindowProcW
SendMessageW
EndDialog
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
EnableWindow
SetWindowTextW
GetDlgItem
SetWindowLongW
DialogBoxParamW
PeekMessageW
GetActiveWindow
GetMessageW
RegisterWindowMessageW
PostThreadMessageW
UnregisterClassW
CharNextW
DestroyWindow
InvalidateRect
gdi32
SetTextColor
GetStockObject
DeleteObject
GetObjectW
CreateFontIndirectW
DeleteDC
SelectObject
SetBkMode
advapi32
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
SetServiceStatus
CloseServiceHandle
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey
CryptAcquireContextW
CryptDestroyHash
CryptHashData
CryptDestroyKey
CryptDeriveKey
CryptCreateHash
CryptReleaseContext
CryptGetHashParam
CryptDecrypt
shell32
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
oleaut32
VarUI4FromStr
shlwapi
PathIsUNCW
Sections
.text Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ