Static task
static1
Behavioral task
behavioral1
Sample
ec9cad0ab3bd21eb504b2c7e4df6ec21dd347043d426188fecfd61abd02ec3cb.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ec9cad0ab3bd21eb504b2c7e4df6ec21dd347043d426188fecfd61abd02ec3cb.exe
Resource
win10v2004-20230703-en
General
-
Target
ec9cad0ab3bd21eb504b2c7e4df6ec21dd347043d426188fecfd61abd02ec3cb
-
Size
850KB
-
MD5
9635adb443b6595f63b3bb1d73fc99bc
-
SHA1
71d335fcc9958ba4e3a47f5cd32a30fa37f2dcb6
-
SHA256
ec9cad0ab3bd21eb504b2c7e4df6ec21dd347043d426188fecfd61abd02ec3cb
-
SHA512
9b6c73d2ecef68642d51db0d308989d419eb3c889b32165da6f0e6eb4b9a1bb26e0d7f7665eca19774026a9a7ce4822e4ef32aea59b34539449d0101bad1152f
-
SSDEEP
12288:cxXzRDx0D9MCOCzSSLdfnx4fsveK9hobFGeDE7/Cw7npeFDSo/8Ecs023K0E:cxL05WCxBfnFUFGeu/CGnpeFDSOtE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec9cad0ab3bd21eb504b2c7e4df6ec21dd347043d426188fecfd61abd02ec3cb
Files
-
ec9cad0ab3bd21eb504b2c7e4df6ec21dd347043d426188fecfd61abd02ec3cb.exe windows x86
067bad4899f5299b41ecc1fba508e8e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetTickCount
GenerateConsoleCtrlEvent
FlushFileBuffers
GetExitCodeProcess
SetFilePointer
CreateDirectoryA
GlobalHandle
ExpandEnvironmentStringsA
GetTimeFormatA
GetFinalPathNameByHandleA
GetUserDefaultLCID
GetDateFormatA
LocalFree
FormatMessageA
GetLocaleInfoA
WideCharToMultiByte
GetPrivateProfileSectionA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetPriorityClass
AddVectoredExceptionHandler
GetCurrentProcessId
GetCurrentThread
lstrlenA
RaiseException
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
HeapAlloc
DeleteProcThreadAttributeList
CreateThread
ReleaseSRWLockExclusive
UpdateProcThreadAttribute
Sleep
DuplicateHandle
ResumeThread
WaitForSingleObject
PeekNamedPipe
CreatePipe
SetThreadPriority
InitializeProcThreadAttributeList
TerminateProcess
TryAcquireSRWLockExclusive
GetStdHandle
HeapFree
CreateNamedPipeA
SetHandleInformation
GetTempFileNameA
GetLongPathNameA
SetEnvironmentVariableA
DeleteCriticalSection
DecodePointer
GetTempPathA
MultiByteToWideChar
GetProcessHeap
SetCurrentDirectoryA
GetCurrentDirectoryA
FindClose
GetEnvironmentVariableA
InitializeCriticalSectionEx
OpenFile
GetFullPathNameA
FindNextFileA
FindFirstFileA
GetFileAttributesExA
CompareFileTime
ReadFile
DebugBreak
VerifyVersionInfoW
VerSetConditionMask
GetLocalTime
GetLastError
CompareStringA
GetDiskFreeSpaceA
OpenProcess
GetVolumeInformationA
GetDriveTypeA
GetCurrentProcess
GetModuleFileNameA
LoadLibraryExW
GetVersionExA
FreeLibrary
GetProcAddress
GetModuleHandleA
LoadLibraryA
LoadResource
CloseHandle
GlobalFree
GlobalAlloc
LockResource
CreateFileA
FreeResource
FindResourceA
WriteFile
SizeofResource
MulDiv
GlobalUnlock
GlobalLock
SetUnhandledExceptionFilter
GetCurrentThreadId
SetErrorMode
GetLogicalDrives
GetWindowsDirectoryA
WritePrivateProfileSectionA
user32
ScreenToClient
GetClassNameA
SetCaretPos
BeginDeferWindowPos
SetTimer
DdeConnect
DdeGetLastError
DdeCreateStringHandleA
ClientToScreen
CreateCaret
MapWindowPoints
GetWindowLongA
LoadBitmapA
DdeUninitialize
DdeClientTransaction
DestroyCaret
EndDeferWindowPos
LoadIconA
ShowCaret
KillTimer
DdeDisconnect
DdeInitializeA
DdeFreeStringHandle
GetCursorPos
SendInput
TabbedTextOutW
GetDC
FillRect
DrawIcon
DrawTextA
FrameRect
TabbedTextOutA
DrawTextW
DrawEdge
ReleaseDC
HideCaret
EndPaint
UnregisterClassA
GetMessageW
DispatchMessageA
LoadCursorA
SetWindowPos
keybd_event
SetActiveWindow
PostMessageA
CallNextHookEx
WaitMessage
GetKeyboardState
TranslateAcceleratorA
GetWindowTextA
LoadAcceleratorsA
AttachThreadInput
GetForegroundWindow
UnhookWindowsHookEx
TranslateMessage
SetCapture
SetCursor
PeekMessageA
ReleaseCapture
IsIconic
wsprintfA
CallWindowProcA
DrawFocusRect
GetSysColor
SendDlgItemMessageA
SetDlgItemTextA
GetDlgItem
EnumChildWindows
GetMessageA
OpenClipboard
CloseClipboard
GetKeyboardLayout
IsCharAlphaNumericA
GetClipboardData
EnableWindow
UpdateWindow
DrawMenuBar
SetFocus
IsClipboardFormatAvailable
BeginPaint
IsDialogMessageA
IsWindow
GetFocus
DragDetect
LoadStringA
MessageBeep
CharUpperBuffA
CharToOemA
OemToCharA
CharUpperA
CharLowerA
RemovePropA
SetPropA
GetCapture
GetPropA
PtInRect
GetAsyncKeyState
TrackMouseEvent
GetMenuItemRect
MenuItemFromPoint
GetMenuItemInfoW
GetMenuBarInfo
GetWindowDC
GetSystemMetrics
GetWindowPlacement
OffsetRect
IntersectRect
SystemParametersInfoA
GetMessageTime
LoadMenuA
GetMenuItemID
InsertMenuA
DeleteMenu
CreatePopupMenu
TrackPopupMenu
GetSubMenu
GetMenuItemCount
SetMenuItemInfoA
SetMenu
DestroyMenu
AppendMenuA
RemoveMenu
CheckMenuItem
EnableMenuItem
GetMenuItemInfoA
GetMenuStringA
CreateMenu
ModifyMenuA
PostQuitMessage
GetClassInfoExA
BringWindowToTop
SetClassLongA
RegisterClassExA
ChildWindowFromPoint
SetWindowsHookExA
AdjustWindowRectEx
GetWindowRect
ShowWindow
GetDlgItemTextA
RedrawWindow
PostThreadMessageA
SetWindowPlacement
ValidateRect
SetParent
GetClientRect
IsZoomed
GetWindowTextLengthA
InvalidateRect
DeferWindowPos
GetKeyState
LoadImageA
GetCaretPos
GetWindowThreadProcessId
CreateWindowExA
DefWindowProcA
MessageBoxA
SetWindowLongA
RegisterWindowMessageA
SetForegroundWindow
CreateDialogParamA
IsWindowEnabled
SetWindowTextA
DialogBoxParamA
EndDialog
IsWindowVisible
DestroyWindow
SendMessageA
DestroyIcon
GetMessagePos
GetParent
gdi32
PatBlt
CreateCompatibleDC
GetTextExtentPoint32A
ExtTextOutA
SaveDC
BitBlt
GetBkColor
GetObjectA
CombineRgn
CreateBitmap
StretchBlt
CreateRectRgn
GetDIBits
GetStockObject
SelectObject
CreateCompatibleBitmap
GetClipBox
GetDCOrgEx
CreateFontIndirectA
SetBrushOrgEx
Polyline
GetWindowOrgEx
PaintRgn
SetWindowOrgEx
GetDeviceCaps
DeleteDC
TextOutW
SetTextColor
TextOutA
LineTo
Rectangle
SelectClipRgn
GetTextColor
ExcludeClipRect
MoveToEx
SetBkColor
Ellipse
SetStretchBltMode
RestoreDC
CreateDCA
GetTextMetricsA
RoundRect
SetBkMode
ExtCreatePen
EnumFontFamiliesA
DeleteObject
SetDIBits
GetTextExtentPoint32W
CreateSolidBrush
comdlg32
ChooseFontA
ChooseColorA
PrintDlgA
advapi32
RegQueryValueExA
MapGenericMask
DuplicateToken
OpenProcessToken
AccessCheck
GetFileSecurityA
RegEnumValueA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
GetUserNameA
RegCreateKeyExA
RegSetValueExA
shell32
SHGetFileInfoA
SHBrowseForFolderA
ShellExecuteExA
SHGetSpecialFolderPathA
SHGetPathFromIDListA
ShellExecuteA
ole32
OleInitialize
OleUninitialize
CoCreateInstance
shlwapi
UrlCreateFromPathA
uxtheme
SetWindowTheme
DrawThemeTextEx
OpenThemeData
msvcp140
?bad@ios_base@std@@QBE_NXZ
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?gcount@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QBE_JXZ
?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBE_JXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?eof@ios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
vcruntime140
_except_handler4_common
__current_exception_context
__std_type_info_destroy_list
_CxxThrowException
memcpy
__current_exception
_purecall
__CxxFrameHandler3
__std_terminate
strrchr
memset
__std_exception_destroy
__std_exception_copy
strchr
memmove
strstr
api-ms-win-crt-runtime-l1-1-0
__p___argv
_errno
_set_invalid_parameter_handler
_invalid_parameter_noinfo
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_seh_filter_exe
_set_app_type
_controlfp_s
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
terminate
_c_exit
_register_thread_local_exe_atexit_callback
__p___argc
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-convert-l1-1-0
mbstowcs
wcstombs
atof
_itoa
strtod
_ecvt_s
atoi
strtoul
strtol
api-ms-win-crt-stdio-l1-1-0
_set_fmode
_wfopen_s
__stdio_common_vsscanf
_write
__stdio_common_vfprintf
fseek
ftell
_getcwd
__stdio_common_vsprintf_s
fopen
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
__p__commode
fclose
fwrite
_ftelli64
getc
fputc
fflush
_get_stream_buffer_pointers
fopen_s
_fseeki64
ferror
fread
fsetpos
ungetc
setvbuf
fgetpos
fgetc
api-ms-win-crt-string-l1-1-0
strncmp
strpbrk
strncpy
isxdigit
_stricmp
isupper
isalnum
isspace
_memicmp
isdigit
isalpha
tolower
toupper
_strrev
_strnicmp
strncpy_s
_strdup
islower
api-ms-win-crt-utility-l1-1-0
srand
qsort
api-ms-win-crt-time-l1-1-0
_time64
_ctime64
api-ms-win-crt-filesystem-l1-1-0
_stat64i32
_chdrive
_chdir
_chmod
_unlock_file
remove
_lock_file
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_recalloc
free
malloc
_callnewh
api-ms-win-crt-math-l1-1-0
ceil
_except1
_finite
_CIfmod
_isnan
floor
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
comctl32
ImageList_Draw
ImageList_Create
ImageList_Destroy
ImageList_GetIcon
ImageList_DrawEx
InitCommonControlsEx
ImageList_AddMasked
Sections
.text Size: 692KB - Virtual size: 691KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ