Static task
static1
Behavioral task
behavioral1
Sample
1fb5df596e85c8e3d1f9ce5d7442364e.exe
Resource
win7-20230712-en
General
-
Target
1fb5df596e85c8e3d1f9ce5d7442364e.exe
-
Size
636KB
-
MD5
1fb5df596e85c8e3d1f9ce5d7442364e
-
SHA1
52454afab3e1704db54e37206ceddcbb1d62402f
-
SHA256
ccf14b7a910c92c1d9b092c62e8e74ef68b521129672ad426fcc2c26fc1d0ecb
-
SHA512
b819c1d9d823fe65cacf8d6c3896d976c39dd274ff02cb9e43adffb9b2fdfa0c518fc15df9ab62211086d9d739669b906dfc6e5e531af1f9dc85a285ca30b495
-
SSDEEP
6144:5Y7ssFDIRjkzJwz9OhcHQU8rATKbGHbI0/tGKP15Vuc7GHbI0/tGKP15Vuc1y6:U9RtcH5049Duca049Duc1y6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fb5df596e85c8e3d1f9ce5d7442364e.exe
Files
-
1fb5df596e85c8e3d1f9ce5d7442364e.exe.exe windows x64
c4a784232bca53e5d6c372fa53bf8d4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
TraceMessage
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyExW
EventRegister
EventWrite
EventUnregister
RegGetValueW
RegQueryValueExW
kernel32
GetCurrentProcessId
GlobalDeleteAtom
HeapAlloc
GetProcessHeap
GetSystemDirectoryW
GetLocaleInfoW
UnhandledExceptionFilter
FormatMessageW
GlobalAddAtomW
GetTickCount64
GetTickCount
ReleaseMutex
RegisterApplicationRestart
SetProcessShutdownParameters
CloseHandle
GetLastError
CreateMutexW
Sleep
CompareStringW
GetModuleHandleW
IsProcessInJob
GetCurrentProcess
GetCurrentThreadId
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
gdi32
SetStretchBltMode
CombineRgn
CreateRectRgn
LineTo
MoveToEx
SetBkMode
SetTextColor
CreateSolidBrush
StretchBlt
GetStockObject
CreateCompatibleBitmap
GetObjectW
CreateCompatibleDC
DeleteDC
SelectObject
DeleteObject
CreateBrushIndirect
CreateBitmap
user32
GetAsyncKeyState
FindWindowW
PostMessageW
CallNextHookEx
LoadStringW
SetForegroundWindow
SetWindowsHookExW
SystemParametersInfoW
UnhookWindowsHookEx
ShowSystemCursor
GetSystemMetrics
GetWindowLongW
GetAncestor
PtInRect
EqualRect
GetDesktopWindow
GetWindowRect
IsRectEmpty
OffsetRect
MonitorFromPoint
GetMonitorInfoW
CopyRect
RemovePropW
CloseDesktop
GetUserObjectInformationW
GetThreadDesktop
SetWindowPlacement
SendInput
CheckMenuRadioItem
InsertMenuItemW
GetMessagePos
GetKeyState
WindowFromPhysicalPoint
ShowWindow
SetTimer
KillTimer
ClipCursor
DestroyWindow
IsWindow
GetPhysicalCursorPos
CreateWindowExW
UnionRect
RegisterClassExW
UpdateWindow
IsIconic
MonitorFromRect
DefWindowProcW
GetGUIThreadInfo
SetRect
InflateRect
IntersectRect
GetWindowLongPtrW
SetWindowLongPtrW
LoadCursorW
SetWindowRgn
RegisterClassW
FillRect
CreatePopupMenu
GetDoubleClickTime
SendMessageTimeoutW
RealGetWindowClassW
GetClassNameW
SetWinEventHook
UnhookWinEvent
SetDlgItemTextW
SetCursor
TrackPopupMenu
PostQuitMessage
ord2001
SetMagnificationDesktopMagnification
SetMagnificationDesktopColorEffect
SetLayeredWindowAttributes
SetPropW
GetParent
GetDlgCtrlID
MapWindowPoints
EnableWindow
MonitorFromWindow
SetFocus
CheckDlgButton
SendDlgItemMessageW
LoadImageW
GetSysColor
CreateDialogParamW
GetDlgItem
GetCursorPos
GetWindowThreadProcessId
UpdateLayeredWindow
ReleaseDC
GetDC
IsWindowEnabled
GetForegroundWindow
GetCapture
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
RegisterHotKey
UnregisterHotKey
SetRectEmpty
GetWindow
SetWindowPos
AdjustWindowRectEx
IsWindowVisible
SendMessageW
LoadIconW
SetWindowLongW
SetPhysicalCursorPos
EnumDisplayMonitors
InvalidateRect
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
AdjustWindowRect
GetClientRect
EndPaint
BeginPaint
msvcrt
memset
memcpy
ceilf
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
_vsnwprintf
_purecall
??2@YAPEAX_K@Z
wcstok
??3@YAXPEAX@Z
_wcsicmp
ceil
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleacc
AccessibleObjectFromEvent
AccessibleObjectFromWindow
comctl32
ord17
ord345
InitCommonControlsEx
oleaut32
SysFreeString
VariantInit
VariantClear
gdiplus
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipCloneImage
GdipDisposeImage
GdipFillPolygonI
GdipFillRectangleI
GdipDrawPolygonI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipAlloc
GdipFree
GdiplusShutdown
GdiplusStartup
shell32
SHAppBarMessage
ShellExecuteW
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
WinSqmAddToStream
WinSqmSetDWORD
WinSqmIsOptedIn
WinSqmIncrementDWORD
shlwapi
ord628
StrCmpW
dwmapi
DwmSetWindowAttribute
DwmIsCompositionEnabled
dui70
InitProcessPriv
InitThread
UnInitProcessPriv
UnInitThread
??0NativeHWNDHost@DirectUI@@QEAA@XZ
??1NativeHWNDHost@DirectUI@@UEAA@XZ
?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@I@Z
?EndDefer@Element@DirectUI@@QEAAXK@Z
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
StrToID
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z
?DestroyWindow@NativeHWNDHost@DirectUI@@QEAAXXZ
?WndProc@HWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z
?CanSetFocus@HWNDElement@DirectUI@@UEAA_NXZ
?OnCompositionChanged@HWNDElement@DirectUI@@UEAAXXZ
?OnWmThemeChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z
?OnThemeChanged@HWNDElement@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z
?GetHWND@HWNDElement@DirectUI@@UEAAPEAUHWND__@@XZ
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?DefaultAction@Element@DirectUI@@UEAAJXZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?GetClassInfoW@HWNDElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
?RemoveTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?SetKeyFocus@Element@DirectUI@@UEAAXXZ
?GetClassInfoPtr@CCPushButton@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetKeyFocusedElement@HWNDElement@DirectUI@@SAPEAVElement@2@XZ
?GetLocation@Element@DirectUI@@QEAAPEBUtagPOINT@@PEAPEAVValue@2@@Z
?Click@Button@DirectUI@@SA?AVUID@@XZ
?SetEnabled@Element@DirectUI@@QEAAJ_N@Z
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
??0HWNDElement@DirectUI@@QEAA@XZ
?OnEvent@HWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z
?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z
?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
?GetExtent@Element@DirectUI@@QEAAPEBUtagSIZE@@PEAPEAVValue@2@@Z
?OnGroupChanged@HWNDElement@DirectUI@@UEAAXH_N@Z
?Add@Element@DirectUI@@QEAAJPEAV12@@Z
?LoadFromResource@DUIFactory@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG1PEAVElement@2@PEAKPEAPEAV42@1@Z
?Destroy@Layout@DirectUI@@QEAAXXZ
?SetLayout@Element@DirectUI@@QEAAJPEAVLayout@2@@Z
?Create@FillLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z
?DoubleBuffered@Element@DirectUI@@QEAAX_N@Z
?Host@NativeHWNDHost@DirectUI@@QEAAXPEAVElement@2@@Z
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z
?SetActive@Element@DirectUI@@QEAAJH@Z
?Release@Value@DirectUI@@QEAAXXZ
?SetVisible@Element@DirectUI@@QEAAJ_N@Z
?Initialize@HWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z
?Register@HWNDElement@DirectUI@@SAJXZ
?Destroy@Element@DirectUI@@QEAAJ_N@Z
??1DUIFactory@DirectUI@@QEAA@XZ
??1HWNDElement@DirectUI@@UEAA@XZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnInput@HWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnDestroy@HWNDElement@DirectUI@@UEAAXXZ
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
magnification
MagSetWindowTransform
MagSetWindowSource
MagUninitialize
MagInitialize
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ