Static task
static1
Behavioral task
behavioral1
Sample
5ed23b0cd760c40ff8c225c4fe58315c4ba700700d97f7a1f8fe0a78f1b4c1f4.exe
Resource
win7-20230712-en
General
-
Target
5ed23b0cd760c40ff8c225c4fe58315c4ba700700d97f7a1f8fe0a78f1b4c1f4
-
Size
521KB
-
MD5
7abf431015ed2c1b8bda7a4091dc4569
-
SHA1
e0b9b70f03a9463ad63b01155801aef7f206d745
-
SHA256
5ed23b0cd760c40ff8c225c4fe58315c4ba700700d97f7a1f8fe0a78f1b4c1f4
-
SHA512
21aabc9892bdf477a2783f7102e68eb963fcbb7f48ad8587529743aa3b7f3eb7fee2ebff629e59f0ae811740a8991fc186a5d4acbfcf3626b362e69f6450ef8a
-
SSDEEP
6144:2vGdSWgpAQ9cM2/cNy/U/WxcGDLfe1dmOvJ2pd2rLpqtTnF34SgjLx829lm:BdSWgmq1/y/U/W+EUFvJ5rOF34719lm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ed23b0cd760c40ff8c225c4fe58315c4ba700700d97f7a1f8fe0a78f1b4c1f4
Files
-
5ed23b0cd760c40ff8c225c4fe58315c4ba700700d97f7a1f8fe0a78f1b4c1f4.exe windows x86
c655d4c10703bd102eada058fbab550c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetFileSizeEx
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileAttributesA
GetTempPathW
GetVersion
GetCommandLineW
SetFilePointer
GlobalLock
SetEvent
GetTickCount
WriteFile
GlobalAlloc
ReadFile
GlobalUnlock
CreateEventW
GetCurrentProcessId
GetTempFileNameW
FindClose
DeleteFileW
WaitForSingleObject
WaitForMultipleObjects
InterlockedExchange
DeviceIoControl
WideCharToMultiByte
GetModuleHandleExW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetModuleHandleA
QueryPerformanceCounter
CloseHandle
FreeEnvironmentStringsW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStringTypeA
GetStartupInfoA
GetFileType
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
HeapCreate
GetStringTypeW
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoW
CreateThread
ExitThread
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
TlsAlloc
ReleaseMutex
HeapWalk
HeapLock
OpenThread
HeapUnlock
TlsSetValue
OutputDebugStringW
TlsGetValue
SetFilePointerEx
SetEndOfFile
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
GetCurrentThreadId
DeleteCriticalSection
lstrcmpiW
LockResource
EnterCriticalSection
GetProcAddress
SetLastError
GetLastError
RaiseException
ExitProcess
FlushInstructionCache
lstrlenW
MultiByteToWideChar
GetModuleFileNameW
MulDiv
LeaveCriticalSection
GetVersionExW
SizeofResource
Sleep
LoadLibraryW
GetSystemDirectoryW
InitializeCriticalSection
GetModuleHandleW
InterlockedCompareExchange
GetSystemWindowsDirectoryW
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
LoadResource
FreeLibrary
SystemTimeToFileTime
CreateFileA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetLocaleInfoA
FindResourceW
FindResourceExW
FreeResource
CreateMutexW
GetEnvironmentStringsW
user32
SetWindowLongW
ShowWindow
PeekMessageW
TranslateMessage
GetDC
SendMessageTimeoutW
CreateDialogParamW
GetActiveWindow
MessageBoxW
DefWindowProcW
UnregisterClassA
DispatchMessageW
EndPaint
BeginPaint
GetClassInfoW
RegisterClassW
CallWindowProcW
LoadCursorW
RegisterClassExW
IntersectRect
CreateWindowExW
ReleaseDC
GetWindowTextLengthW
CloseClipboard
SetTimer
GetWindowRect
PostQuitMessage
LoadImageW
DrawTextW
KillTimer
DialogBoxParamW
GetParent
GetClientRect
IsDialogMessageW
InvalidateRect
GetWindowLongW
GetWindowTextW
EmptyClipboard
MonitorFromWindow
GetDlgItem
SetWindowPos
IsWindow
OpenClipboard
GetSystemMetrics
MapWindowPoints
EnableWindow
SetClipboardData
SetWindowTextW
GetMonitorInfoW
GetWindow
MoveWindow
PostMessageW
IsIconic
SendMessageW
FindWindowExW
DestroyWindow
GetMessageW
CharNextW
FindWindowW
EndDialog
gdi32
SetBkColor
ExtTextOutW
CreateDIBSection
DeleteObject
GetObjectW
SetStretchBltMode
GetTextExtentPointW
DeleteDC
SelectObject
CreateFontW
GetDeviceCaps
CreateCompatibleDC
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegQueryValueExA
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
CheckTokenMembership
RegOpenKeyExW
FreeSid
AllocateAndInitializeSid
RegQueryValueExW
shell32
ShellExecuteW
ShellExecuteExW
DragQueryFileW
ole32
OleInitialize
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CoCreateInstance
oleaut32
SysFreeString
SysStringLen
VariantInit
SysStringByteLen
VarUI4FromStr
SysAllocString
VariantClear
SysAllocStringByteLen
version
VerQueryValueW
shlwapi
PathCombineW
SHGetValueW
PathRemoveFileSpecW
PathCanonicalizeW
PathIsRelativeW
PathAppendW
PathFileExistsW
comctl32
InitCommonControlsEx
ord17
msimg32
AlphaBlend
gdiplus
GdiplusShutdown
GdiplusStartup
Sections
.text Size: 249KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE