Static task
static1
Behavioral task
behavioral1
Sample
83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702.exe
Resource
win10v2004-20230703-en
General
-
Target
83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702
-
Size
519KB
-
MD5
cebd2eb5b97731040794dc5803c703ce
-
SHA1
8cbf84b7cc157c724c4c04106ddfa35342bd53c6
-
SHA256
83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702
-
SHA512
1268282ac7c84bc0e21f7d048324bc6491eadfef1c3e663f527b3ee5a33726ab9afb2a479a0560e63ba5eab7dca5e539e4bc5709dd1ea43736efc704cd5a559c
-
SSDEEP
12288:Qi1KnmtwuxAZIHHHHHHDmZyUBHZH0HVHHHHq1V2c6k6M:Qi1twuxAWHHHHHHDmZyUBHZH0HVHHHHw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702
Files
-
83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702.exe windows x86
a9500a36b5c141ac60f7ce0c96f45e46
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptDestroyKey
CryptEncrypt
CryptExportKey
CryptGetHashParam
CryptHashData
CryptImportKey
CryptReleaseContext
CryptSetHashParam
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
comctl32
InitCommonControlsEx
comdlg32
GetOpenFileNameW
GetSaveFileNameW
crypt32
CertCreateCertificateContext
CertFreeCertificateContext
CertVerifySubjectCertificateContext
CryptImportPublicKeyInfoEx
CryptMemAlloc
CryptMemFree
kernel32
CloseHandle
CreateFileW
DeleteCriticalSection
EnterCriticalSection
FormatMessageW
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LocalFree
QueryPerformanceCounter
ReadFile
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WriteFile
lstrlenW
msvcrt
__dllonexit
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_fpreset
_initterm
_iob
_lock
_onexit
_snprintf
_snwprintf
_unlock
_wcmdln
_wtoi
abort
atoi
calloc
exit
fprintf
free
fwrite
gmtime
localtime
malloc
memcmp
memcpy
memmove
memset
mktime
printf
putchar
rand
realloc
signal
sprintf
strcat
strcpy
strncmp
strncpy
strtok
swprintf
time
vfprintf
vsprintf
wcscat
wcscmp
wcscpy
wcslen
wcsncmp
wcstok
ole32
CoTaskMemFree
secur32
AcquireCredentialsHandleW
DecryptMessage
DeleteSecurityContext
EncryptMessage
FreeContextBuffer
FreeCredentialsHandle
InitializeSecurityContextA
QueryContextAttributesW
QueryCredentialsAttributesA
shell32
SHGetFolderLocation
SHGetPathFromIDListW
ws2_32
WSAAsyncSelect
WSACleanup
WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
getpeername
getsockname
getsockopt
htons
inet_addr
recv
select
send
setsockopt
socket
gdi32
BitBlt
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectW
CreateICW
CreatePen
CreateRectRgn
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectW
IntersectClipRect
LineTo
MoveToEx
SelectClipRgn
SelectObject
SetBkMode
SetTextColor
StretchBlt
user32
AdjustWindowRectEx
BeginPaint
BringWindowToTop
CreateCursor
CreateDialogParamW
CreateWindowExW
DefWindowProcW
DestroyCursor
DestroyIcon
DialogBoxParamW
DispatchMessageW
DrawTextW
EndDialog
EndPaint
EnumDisplayDevicesW
EnumDisplaySettingsExW
FillRect
GetClientRect
GetDlgItem
GetDlgItemTextW
GetKeyState
GetMessageW
GetSystemMetrics
GetWindowDC
GetWindowLongW
IntersectRect
InvalidateRgn
IsRectEmpty
LoadCursorW
LoadIconW
LoadImageW
LoadStringW
MessageBoxW
PostQuitMessage
RegisterClassW
ReleaseDC
ScreenToClient
ScrollWindowEx
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPos
ShowWindow
TranslateMessage
UpdateWindow
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 181KB - Virtual size: 180KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ