Static task
static1
Behavioral task
behavioral1
Sample
2c74532ee7ac5d792d2af3915042dd622174a4b7bbc1dbd2db292b526b50db33.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2c74532ee7ac5d792d2af3915042dd622174a4b7bbc1dbd2db292b526b50db33.exe
Resource
win10v2004-20230703-en
General
-
Target
2c74532ee7ac5d792d2af3915042dd622174a4b7bbc1dbd2db292b526b50db33
-
Size
650KB
-
MD5
1819830d1b1389b12f1ed09788c62fcc
-
SHA1
fd0961155773aba8fac7201907bb5d183b79ef48
-
SHA256
2c74532ee7ac5d792d2af3915042dd622174a4b7bbc1dbd2db292b526b50db33
-
SHA512
4ae266a5ac47b8ca77ebd120f537c9c8b08af04bb16b6ec6759f7ab881ca2ef00de93c26df5663bf0c67298626d1245b55b995ff3bf9c65012e58a90c773acf7
-
SSDEEP
6144:Ug2m8zVWNEI+0tl0x0uTWS6/HqXjarIMwdf2+6UqcMONKx5uetfi7IuiHg7:Ug2mqVWNEI+Ml0I3rLod6Ufwx5rtS6g7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c74532ee7ac5d792d2af3915042dd622174a4b7bbc1dbd2db292b526b50db33
Files
-
2c74532ee7ac5d792d2af3915042dd622174a4b7bbc1dbd2db292b526b50db33.exe windows x86
74bcc23fe5d5dccc05726fafdbd87dd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryW
CreateToolhelp32Snapshot
Process32FirstW
Module32FirstW
Process32NextW
TerminateProcess
InterlockedCompareExchange
GetTickCount
MoveFileW
GetFileAttributesW
GetSystemTimeAsFileTime
InterlockedDecrement
OutputDebugStringW
OpenEventW
GetExitCodeThread
CreateProcessW
ReleaseMutex
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
WritePrivateProfileStringW
GetWindowsDirectoryW
ResetEvent
SetEvent
WaitForSingleObject
CreateEventW
LocalAlloc
SetFilePointer
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
Sleep
RaiseException
GetPrivateProfileIntW
GetPrivateProfileStringW
GetModuleFileNameW
GetLastError
LocalFree
GetLocalTime
SetLastError
InterlockedExchange
lstrlenA
MultiByteToWideChar
LeaveCriticalSection
WideCharToMultiByte
EnterCriticalSection
lstrlenW
FreeResource
DeleteCriticalSection
FreeLibrary
CreateMutexW
FlushInstructionCache
GetVersionExW
InitializeCriticalSection
CloseHandle
GetCurrentProcess
FindResourceExW
OpenMutexW
CreateFileW
GetFileSize
GetProcAddress
FindClose
LoadResource
ReadFile
LoadLibraryW
FindFirstFileW
LockResource
GetModuleHandleW
CreateDirectoryW
SizeofResource
DeleteFileW
FindResourceW
GetCurrentThreadId
user32
GetWindow
GetForegroundWindow
DestroyWindow
RegisterWindowMessageW
CopyRect
CreateWindowExW
SystemParametersInfoW
SetWindowPos
AttachThreadInput
SetForegroundWindow
PostMessageW
SetActiveWindow
FindWindowW
SwitchToThisWindow
LoadCursorW
BringWindowToTop
IsWindow
SetFocus
SendMessageW
UnregisterClassA
SetCapture
ClientToScreen
OffsetRect
SetRect
KillTimer
IsDialogMessageW
PtInRect
GetNextDlgTabItem
SetRectEmpty
IsChild
EqualRect
SetCursor
GetFocus
GetDlgCtrlID
IsWindowVisible
DestroyIcon
LoadIconW
UpdateLayeredWindow
ShowWindow
IntersectRect
IsRectEmpty
GetMonitorInfoW
MonitorFromWindow
DrawIconEx
CallWindowProcW
GetDlgItem
ScreenToClient
DrawTextW
EndPaint
GetCursorPos
SetTimer
ReleaseCapture
BeginPaint
GetMessageW
PostThreadMessageW
DispatchMessageW
TranslateMessage
PeekMessageW
LoadBitmapW
LoadImageW
InflateRect
RegisterClassExW
InvalidateRect
EnableWindow
IsWindowEnabled
GetDesktopWindow
GetActiveWindow
DefWindowProcW
MapWindowPoints
GetClientRect
ReleaseDC
GetWindowLongW
GetWindowRect
GetDC
GetClassInfoExW
SetWindowLongW
GetParent
MoveWindow
GetWindowThreadProcessId
gdi32
GetTextColor
SetViewportOrgEx
LineTo
ExtSelectClipRgn
TextOutW
MoveToEx
GetViewportOrgEx
RectInRegion
GetTextExtentPoint32W
CreateRoundRectRgn
RoundRect
CreateRectRgnIndirect
CombineRgn
CreateFontIndirectW
GetCurrentObject
SetBkMode
OffsetRgn
SaveDC
SelectClipRgn
CreatePen
RestoreDC
GetStockObject
Rectangle
GetObjectW
SetStretchBltMode
CreateCompatibleDC
StretchBlt
CreateCompatibleBitmap
CreateRectRgn
CreateBitmap
SetBkColor
BitBlt
SetTextColor
SelectObject
CreateDIBSection
DeleteObject
GetClipRgn
DeleteDC
ExtTextOutW
GetDeviceCaps
advapi32
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
InitializeSecurityDescriptor
RegQueryValueExW
RegCloseKey
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyExW
RegCreateKeyExW
SetSecurityDescriptorDacl
RegOpenKeyW
shell32
ShellExecuteW
SHGetSpecialFolderPathW
ShellExecuteExW
ord680
ole32
CreateStreamOnHGlobal
CoCreateGuid
CoInitialize
CoUninitialize
oleaut32
SysFreeString
shlwapi
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
StrToIntA
PathFindFileNameW
StrToIntW
PathAddBackslashW
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
msvcp80
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
gdiplus
GdipGraphicsClear
GdipCloneImage
GdipDrawImagePointsRectI
GdipGetFontCollectionFamilyCount
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipDrawImageRectRect
GdipCreateBitmapFromScan0
GdipSetInterpolationMode
GdipImageRotateFlip
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipCreateHBITMAPFromBitmap
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdiplusStartup
GdipGetImageWidth
GdipCreateBitmapFromStream
GdipDisposeImageAttributes
GdipDeleteGraphics
GdipCreateImageAttributes
GdipCreateFromHDC
GdiplusShutdown
GdipMeasureString
GdipDrawLinesI
GdipCreateFontFromLogfontW
GdipAlloc
GdipCreateLineBrushFromRectWithAngleI
GdipCreateFont
GdipSetClipPath
GdipSetSmoothingMode
GdipAddPathRectangleI
GdipDrawString
GdipSetTextRenderingHint
GdipFillRectangleI
GdipClosePathFigure
GdipSetStringFormatTrimming
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipAddPathPieI
GdipSetStringFormatLineAlign
GdipFillPath
GdipResetWorldTransform
GdipDrawRectangleI
GdipCreateSolidFill
GdipSetStringFormatAlign
GdipDrawImageI
GdipAddPathArcI
GdipRotateWorldTransform
GdipCloneBrush
GdipSetCompositingQuality
GdipDeletePen
GdipDeleteBrush
GdipSetPixelOffsetMode
GdipCreatePen1
GdipSetPenDashStyle
GdipFree
GdipDeleteFontFamily
GdipDrawImageRectRectI
GdipCloneBitmapArea
GdipDisposeImage
GdipDeleteFont
GdipSetPenEndCap
GdipNewPrivateFontCollection
GdipSetStringFormatFlags
GdipDrawPath
GdipSetPenStartCap
GdipDeletePrivateFontCollection
GdipCreateStringFormat
GdipSetPenMode
GdipDeleteStringFormat
GdipCreatePath
GdipAddPathStringI
GdipPrivateAddFontFile
GdipFillRectangle
GdipDeletePath
GdipTranslateWorldTransform
GdipGetFontSize
GdipDrawLine
GdipDrawImageRectI
GdipGetFamily
msvcr80
memcpy
_vscprintf
wcsstr
_wtoi
vsprintf_s
calloc
fclose
wcscspn
_mbscmp
wcsspn
_wfopen
_invalid_parameter_noinfo
_CxxThrowException
floor
__CxxFrameHandler3
_stricmp
_recalloc
_mbsicmp
??0exception@std@@QAE@ABQBD@Z
memmove_s
_wtof
memcpy_s
_wcslwr_s
??0exception@std@@QAE@ABV01@@Z
wcsrchr
_vscwprintf
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_controlfp_s
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
memset
wcscat_s
_vsnwprintf
_mbschr
__RTDynamicCast
ceil
wcsncmp
_wcsnicmp
iswspace
_wcsicmp
wcschr
wcspbrk
_time64
tolower
isalnum
strchr
isspace
strncmp
isalpha
atoi
fprintf
_vsnprintf_s
memmove
_purecall
_waccess
malloc
_beginthreadex
free
swprintf_s
??_V@YAXPAX@Z
fflush
fwprintf
vswprintf_s
??2@YAPAXI@Z
?what@exception@std@@UBEPBDXZ
??3@YAXPAX@Z
Sections
.text Size: 444KB - Virtual size: 442KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE