Static task
static1
Behavioral task
behavioral1
Sample
f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3.exe
Resource
win10v2004-20230824-en
General
-
Target
f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3
-
Size
1.8MB
-
MD5
863f8a0a6529be2678943c00d9fc8780
-
SHA1
ae2389a790bd4cf10afdc455c8a5af2e4df74056
-
SHA256
f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3
-
SHA512
b906e6077c654237269d061246872d70ec5fa28539d3dbbeb09e3cca616ec0106c6fbed367a3a2a2066941b053f6f22141cb57851c1406d1957000523b79a4cc
-
SSDEEP
24576:qAN/ekMQ9/SOy+oAQoxtPyz+9ldm+RBfyFzk2+USGhR//aq0fP5SwQX/1hxBR+0+:hBkUCUlQ+/mzp3SIB3XRHGoXQL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3
Files
-
f89ffbbe70ad2bc9fb7f5cebe529895ea5873646fe6767c200cb61a3c56ae2d3.exe windows x86
af1949c978972c758ce728696977fcdd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
CreateMutexW
lstrlenW
MoveFileW
DeleteFileW
GetFileAttributesW
CloseHandle
SetFilePointer
LoadLibraryA
GetProcAddress
GetLastError
FormatMessageA
FreeLibrary
LoadLibraryW
GetLocalTime
GetTempPathW
FindClose
FindNextFileW
FindFirstFileW
GlobalSize
GlobalFree
GlobalAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GlobalUnlock
GlobalLock
GetFileSizeEx
CreateDirectoryW
CreateFileW
ReadFile
WriteFile
user32
DestroyWindow
MessageBoxW
MessageBeep
GetSysColor
GetCursorPos
DefMDIChildProcW
GetKeyState
DefFrameProcW
PostQuitMessage
GetMenuStringW
GetFocus
GetMenuItemID
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
TranslateMDISysAccel
GetMessageW
LoadAcceleratorsW
SetForegroundWindow
FindWindowW
GetMenu
CreateMenu
RegisterClassExW
LoadCursorW
InsertMenuW
DeleteMenu
GetSubMenu
SetMenuItemInfoW
BringWindowToTop
GetSysColorBrush
AdjustWindowRect
ReleaseCapture
SetCapture
ValidateRect
DefWindowProcW
SetFocus
LoadImageW
DestroyMenu
TrackPopupMenuEx
KillTimer
GetForegroundWindow
AppendMenuW
RemoveMenu
GetMenuItemCount
CheckMenuItem
EnableMenuItem
ModifyMenuW
AdjustWindowRectEx
GetSystemMetrics
IsWindowEnabled
ClientToScreen
GetActiveWindow
GetDesktopWindow
LoadBitmapW
IsWindowVisible
GetWindowTextW
FillRect
GetDlgCtrlID
GetParent
SetWindowPos
LoadIconW
SetClassLongW
SetCursor
UpdateWindow
SetActiveWindow
CreateWindowExW
GetClientRect
CheckRadioButton
EnableWindow
CreateDialogParamW
CallWindowProcW
SendMessageW
SetWindowTextA
SetWindowTextW
SetTimer
ShowWindow
GetDlgItem
SetDlgItemTextW
SetDlgItemTextA
GetDlgItemTextW
GetDlgItemTextA
GetWindowTextA
GetWindowTextLengthW
IsDlgButtonChecked
CheckDlgButton
GetDlgItemInt
MessageBoxA
CreatePopupMenu
PostMessageW
SetDlgItemInt
EndDialog
GetWindowRect
ScreenToClient
MoveWindow
InvalidateRect
SetWindowLongW
GetWindowLongW
DialogBoxParamW
GetClipboardData
wsprintfW
EmptyClipboard
EnumClipboardFormats
IsClipboardFormatAvailable
RegisterClipboardFormatW
CloseClipboard
SetClipboardData
OpenClipboard
gdi32
DeleteObject
CreateSolidBrush
Rectangle
CreatePen
GetStockObject
SelectObject
comdlg32
ChooseColorW
PageSetupDlgW
CommDlgExtendedError
PrintDlgW
ChooseFontW
advapi32
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
shell32
DragAcceptFiles
DragQueryPoint
DragQueryFileW
ShellExecuteW
ole32
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemFree
msvcr110
_invoke_watson
__crtSetUnhandledExceptionFilter
?terminate@@YAXXZ
_controlfp_s
_commode
_fmode
_wcmdln
_initterm
_initterm_e
_except_handler4_common
_configthreadlocale
_cexit
_exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
signal
abort
rewind
putc
freopen
perror
_CIpow
floor
memcpy
memset
_CIlog
_CIsqrt
strcoll
isxdigit
strpbrk
islower
isupper
tolower
ispunct
memchr
_time64
_difftime64
_localtime64
setlocale
strftime
clock
remove
system
tmpnam
_gmtime64
_mktime64
rename
strcspn
strncat
getenv
_HUGE
frexp
srand
rand
ldexp
modf
ceil
_access
printf
_CIatan2
_CIcosh
_CIfmod
_CIsinh
_CItanh
__CxxFrameHandler3
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
__setusermatherr
iscntrl
isdigit
isalpha
isalnum
localeconv
clearerr
fseek
ftell
fwrite
setvbuf
_popen
calloc
malloc
free
sprintf
strncmp
??3@YAXPAX@Z
memmove
wcsrchr
atof
strspn
realloc
??2@YAPAXI@Z
strstr
atoi
strchr
sscanf
strncpy
strtod
qsort
wcsncpy
wcschr
wcsncmp
wcsstr
strrchr
toupper
feof
strerror
ungetc
__iob_func
_errno
fopen
fread
fprintf
ferror
fclose
getc
isspace
strtoul
fputs
fgets
longjmp
exit
fscanf
tmpfile
_pclose
fflush
_setjmp3
iphlpapi
GetAdaptersInfo
wininet
InternetSetStatusCallbackW
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetOpenUrlW
InternetQueryDataAvailable
msvcp110
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
shlwapi
ord12
comctl32
ImageList_Create
d3d11
D3D11CreateDeviceAndSwapChain
prntvpt
ord9
ord2
ord4
d2d1
ord1
ord2
dwrite
DWriteCreateFactory
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 544KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ