Static task
static1
Behavioral task
behavioral1
Sample
91f6925904a2256e56f53036b70a18d58176973faff5717f170d425eb4d30a33.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
91f6925904a2256e56f53036b70a18d58176973faff5717f170d425eb4d30a33.exe
Resource
win10v2004-20230703-en
General
-
Target
91f6925904a2256e56f53036b70a18d58176973faff5717f170d425eb4d30a33
-
Size
307KB
-
MD5
0e44ba172d5940112f79a55c941e7325
-
SHA1
162425b523e71c47b1cc790a09612b633ad382eb
-
SHA256
91f6925904a2256e56f53036b70a18d58176973faff5717f170d425eb4d30a33
-
SHA512
6e12be23e4fe579e339fe8abf0490921e3b179213cc646dc3b229dd34ea1bc483e990ccc0e381f14fcb1df57be925381e7e40ff27a126d2089aae6299f3f561a
-
SSDEEP
6144:J51nbpOPoB/bmY93gMdvgMZ9ckO7y3dQ61J3R+qTQxA8Q:Jl3dIMZ9v/j1vQxA8Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91f6925904a2256e56f53036b70a18d58176973faff5717f170d425eb4d30a33
Files
-
91f6925904a2256e56f53036b70a18d58176973faff5717f170d425eb4d30a33.exe windows x86
1452fd9dada7ccdfb235dd271609af7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
msi
ord173
kernel32
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
FlushFileBuffers
GetModuleFileNameW
lstrcmpiW
LoadLibraryExW
InitializeCriticalSectionEx
RaiseException
SetThreadLocale
GetSystemDefaultLCID
lstrlenW
CreateThread
DecodePointer
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetExitCodeThread
WaitForSingleObject
OpenProcess
GetExitCodeProcess
CreateProcessW
GetCommandLineW
AddDllDirectory
CreateEventW
SetEvent
GlobalMemoryStatus
SetEnvironmentVariableW
SetCurrentDirectoryW
GetTimeFormatW
GetDateFormatW
GetUserDefaultLangID
VerifyVersionInfoW
VerSetConditionMask
CompareStringW
IsValidCodePage
FindFirstFileExW
LCMapStringW
GetCurrentProcess
GetCommandLineA
GetStdHandle
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
GetOEMCP
GetCPInfo
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
GetConsoleOutputCP
GetModuleHandleW
ExpandEnvironmentStringsW
ReadFile
GetFileSize
CreateDirectoryW
RemoveDirectoryW
GetConsoleMode
WideCharToMultiByte
MultiByteToWideChar
GetEnvironmentVariableW
GetFileType
WriteFile
FindNextFileW
DeleteFileW
SetLastError
GetFullPathNameW
FindFirstFileW
FindClose
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
WriteConsoleW
user32
GetFocus
GetSysColor
IsWindowEnabled
DrawFocusRect
SetCapture
GetCapture
SetCursor
GetDlgCtrlID
GetCursorPos
ScreenToClient
PtInRect
FillRect
EndPaint
BeginPaint
TrackMouseEvent
ReleaseCapture
SetFocus
UpdateWindow
SetRectEmpty
GetClassNameW
LoadCursorW
SystemParametersInfoW
CreateWindowExW
GetWindowTextLengthW
GetWindowTextW
GetDC
ReleaseDC
DrawTextW
OffsetRect
IsWindow
CallWindowProcW
DefWindowProcW
SendMessageW
EndDialog
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
EnableWindow
SetWindowTextW
GetDlgItem
SetWindowLongW
DialogBoxParamW
PeekMessageW
GetActiveWindow
GetMessageW
RegisterWindowMessageW
PostThreadMessageW
UnregisterClassW
CharNextW
DestroyWindow
InvalidateRect
gdi32
SetTextColor
GetStockObject
DeleteObject
GetObjectW
CreateFontIndirectW
DeleteDC
SelectObject
SetBkMode
advapi32
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
SetServiceStatus
CloseServiceHandle
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey
CryptAcquireContextW
CryptDestroyHash
CryptHashData
CryptDestroyKey
CryptDeriveKey
CryptCreateHash
CryptReleaseContext
CryptGetHashParam
CryptDecrypt
shell32
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
oleaut32
VarUI4FromStr
shlwapi
PathIsUNCW
Sections
.text Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ