Static task
static1
Behavioral task
behavioral1
Sample
d139790bffdc4d620b3845f9c5aa7e20ffc8f1ecd181471eb19bcf17547af555.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d139790bffdc4d620b3845f9c5aa7e20ffc8f1ecd181471eb19bcf17547af555.exe
Resource
win10v2004-20230703-en
General
-
Target
d139790bffdc4d620b3845f9c5aa7e20ffc8f1ecd181471eb19bcf17547af555
-
Size
4.3MB
-
MD5
cc051330aad27bf149d69af25820b7b0
-
SHA1
db17097d3353f1f34f5f7c518ad68d01ac477c2b
-
SHA256
d139790bffdc4d620b3845f9c5aa7e20ffc8f1ecd181471eb19bcf17547af555
-
SHA512
c4fc17cee78c496003886d4b44e0aa2f454011cce97c1a8c0d491539f3677b8e17b72d2f1b1a81d293f107b17c69d3bcc8cb983d767a6ffda3f0c3977594ac2d
-
SSDEEP
49152:DiIQkk+aGS83j4bTe+fZ214EibaAefJHCPiFC+3RoVU:+ULS8T4bTeQLxbOJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d139790bffdc4d620b3845f9c5aa7e20ffc8f1ecd181471eb19bcf17547af555
Files
-
d139790bffdc4d620b3845f9c5aa7e20ffc8f1ecd181471eb19bcf17547af555.exe windows x86
c3b8fdea27a9d4731fb4b104f122299a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameA
GetWindowThreadProcessId
GetWindowTextLengthA
PostMessageA
CallWindowProcA
GetCursorPos
OpenClipboard
GetForegroundWindow
ClientToScreen
GetWindowLongA
SetWindowLongA
SetLayeredWindowAttributes
SetCursorPos
EnumDisplaySettingsA
UnhookWindowsHookEx
keybd_event
GetWindowRect
CharUpperA
FindWindowA
GetDlgItem
SetCapture
MapVirtualKeyA
AttachThreadInput
SetActiveWindow
GetGUIThreadInfo
ExitWindowsEx
mouse_event
GetParent
IsWindow
GetPropA
RemovePropA
DestroyWindow
SetPropA
CreateWindowExA
ShowWindow
IsZoomed
IsIconic
MoveWindow
GetDC
UpdateLayeredWindow
ReleaseDC
DefWindowProcA
ReleaseCapture
SetWindowsHookExA
CallNextHookEx
FlashWindowEx
EnableWindow
GetClientRect
GetWindowInfo
EnumWindows
SendInput
MsgWaitForMultipleObjects
ShowCursor
SendMessageTimeoutA
CreateWindowStationA
SetParent
UpdateWindow
SetTimer
GetFocus
GetKeyState
SetForegroundWindow
GetAncestor
SetWindowTextA
SendMessageA
SetFocus
InvalidateRect
KillTimer
EnumChildWindows
GetWindowTextA
CharLowerA
wvsprintfA
SwapMouseButton
IsWindowVisible
OpenIcon
EnumThreadWindows
ClipCursor
GetAsyncKeyState
GetKeyboardState
LoadCursorFromFileA
SetClassLongA
WindowFromPoint
ShowWindowAsync
SetWindowPos
GetDlgCtrlID
GetCaretPos
FlashWindow
PrintWindow
RegisterWindowMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
UnloadKeyboardLayout
GetKeyboardLayoutList
SystemParametersInfoA
GetKeyboardLayout
ActivateKeyboardLayout
GetKeyboardLayoutNameA
LoadKeyboardLayoutA
MessageBoxA
wsprintfA
CloseClipboard
GetClipboardData
PostQuitMessage
SetClipboardData
EmptyClipboard
GetSystemMetrics
SetCursor
EndDialog
CreateDialogIndirectParamA
DestroyMenu
LoadStringA
GetSysColorBrush
LoadCursorA
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetWindow
GetLastActivePopup
ValidateRect
GetActiveWindow
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenu
GetSubMenu
GetMenuItemID
GetClassLongA
GetMessageTime
GetMessagePos
GetWindowPlacement
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
UnregisterClassA
GetDesktopWindow
PtInRect
GetMenuItemCount
TabbedTextOutA
DrawTextA
GrayStringA
FindWindowExA
ChangeDisplaySettingsA
SendDlgItemMessageA
IsDialogMessageA
GetDoubleClickTime
IsWindowEnabled
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetSystemMenu
DeleteMenu
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
SetRect
InflateRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
InvertRect
GetSubMenu
ReleaseDC
IsChild
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetDlgCtrlID
CreateAcceleratorTableA
CreateMenu
ModifyMenuA
AppendMenuA
CreatePopupMenu
DrawIconEx
CreateIconFromResource
GetWindowTextA
GetWindowTextLengthA
CharUpperA
GetWindowDC
BeginPaint
EndPaint
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetLastActivePopup
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
GetClassNameA
GetDesktopWindow
wvsprintfA
LoadStringA
GetSysColorBrush
CreateIconFromResourceEx
RegisterClipboardFormatA
SetRectEmpty
DispatchMessageA
GetMessageA
WindowFromPoint
DrawFocusRect
DrawEdge
DrawFrameControl
TranslateMessage
LoadIconA
GetForegroundWindow
TabbedTextOutA
DrawTextA
GrayStringA
ClipCursor
GetCursor
GetDoubleClickTime
FrameRect
IsRectEmpty
GetSystemMetrics
wsprintfA
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
UnregisterClassA
GetCursorPos
MessageBoxA
MessageBeep
SetWindowPos
SendMessageA
DestroyCursor
SetParent
IsWindow
PostMessageA
GetTopWindow
GetParent
GetFocus
GetClientRect
kernel32
LocalFree
LoadLibraryA
GetProcAddress
lstrcpyn
CreateRemoteThread
MultiByteToWideChar
GetVolumeInformationA
VirtualQueryEx
WriteProcessMemory
DeleteFileA
IsDebuggerPresent
CreateEventA
GetShortPathNameA
Module32Next
GetCurrentThreadId
VirtualAllocEx
TerminateThread
VirtualFreeEx
GetVersion
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileType
GetStdHandle
SetHandleCount
GetACP
HeapSize
RaiseException
LCMapStringW
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
RtlUnwind
GetModuleFileNameA
OpenThread
CreateWaitableTimerA
SetWaitableTimer
WideCharToMultiByte
ResumeThread
WaitForSingleObject
CopyFileA
InitializeCriticalSection
GetProcessTimes
RtlMoveMemory
LocalAlloc
CloseHandle
Module32First
CreateToolhelp32Snapshot
lstrcmpA
GlobalDeleteAtom
TlsAlloc
Process32Next
Process32First
HeapAlloc
GlobalHandle
GetCurrentProcess
MoveFileA
GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
ReadProcessMemory
OpenProcess
FileTimeToSystemTime
GetLocalTime
GetThreadTimes
GetCommandLineA
GetOEMCP
GetCPInfo
IsBadCodePtr
TlsFree
FlushFileBuffers
GetProcessVersion
FindResourceA
GetExitCodeThread
LockResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
SetLastError
GlobalFlags
MulDiv
lstrcpyA
lstrcatA
lstrcmpiA
SetErrorMode
TlsGetValue
LocalReAlloc
OpenEventA
GetDateFormatA
GetTimeFormatA
CreateThread
GetLastError
SetFilePointer
SetEndOfFile
FormatMessageA
TlsSetValue
FreeLibrary
WritePrivateProfileStringA
GetCurrentDirectoryA
SetLocalTime
SetFileAttributesA
RemoveDirectoryA
GetFileAttributesA
CreateDirectoryA
FindClose
FindFirstFileA
FindNextFileA
GetStartupInfoA
GetTickCount
GetFileSize
GetUserDefaultLCID
IsBadReadPtr
HeapReAlloc
ExitProcess
VirtualFree
VirtualAlloc
lstrcpynA
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedDecrement
GetLongPathNameA
WriteFile
DebugActiveProcess
HeapFree
GlobalFree
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
GetExitCodeProcess
ReadFile
PeekNamedPipe
CreateProcessA
CreatePipe
GetComputerNameA
GetVersionExA
DeviceIoControl
CreateFileA
LCMapStringA
lstrlenA
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
RtlFillMemory
SuspendThread
SetThreadContext
GetCurrentThread
TerminateProcess
Thread32First
Thread32Next
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
GlobalReAlloc
SetProcessWorkingSetSize
VirtualProtectEx
GetProcessHeap
GetModuleHandleA
GetCurrentProcessId
Sleep
LoadResource
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
GetACP
HeapSize
TerminateProcess
RaiseException
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
GetStartupInfoA
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GetProfileIntA
GlobalFlags
GetCurrentThread
GetFileTime
GetFileSize
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcmpA
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
lstrcpynA
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
InterlockedExchange
GetProcAddress
GetModuleHandleA
GetVolumeInformationA
SetCurrentDirectoryA
GetCurrentDirectoryA
MulDiv
GetCommandLineA
GetTickCount
WaitForSingleObject
CloseHandle
CreateDirectoryA
CopyFileA
DeleteFileA
MoveFileA
GetFileAttributesA
FindClose
FindFirstFileA
GetTempPathA
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
CreateEventA
CreateThread
GetPrivateProfileStringA
WritePrivateProfileStringA
GetVersionExA
GetLastError
LoadLibraryA
FreeLibrary
GetFullPathNameA
WideCharToMultiByte
MultiByteToWideChar
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GlobalReAlloc
FindNextFileA
lstrcpyA
WinExec
lstrlenA
lstrcatA
InitializeCriticalSection
DeleteCriticalSection
GlobalFree
GlobalSize
ExitProcess
GetCurrentThreadId
GetModuleFileNameA
lstrlenW
ReadFile
LockResource
LoadResource
FindResourceA
SetEvent
CreateFileA
WaitForMultipleObjects
WriteFile
GetProfileStringA
LeaveCriticalSection
EnterCriticalSection
ReleaseSemaphore
ResumeThread
CreateSemaphoreA
GetSystemDirectoryA
GetWindowsDirectoryA
GetCurrentProcess
CreateMutexA
ReleaseMutex
TerminateThread
SuspendThread
GetFileType
ole32
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemAlloc
OleDuplicateData
CoLockObjectExternal
DoDragDrop
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
OleInitialize
OleUninitialize
CLSIDFromString
CreateStreamOnHGlobal
CoCreateInstance
OleRun
CoTaskMemFree
OleGetClipboard
CLSIDFromProgID
CoInitialize
CoUninitialize
OleRun
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
shell32
ShellExecuteA
SHGetFileInfoA
SHChangeNotify
SHFileOperationA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetSpecialFolderPathA
SHGetSpecialFolderPathA
DragQueryFileA
Shell_NotifyIconA
ShellExecuteA
shlwapi
PathFindExtensionA
PathIsDirectoryA
PathIsDirectoryEmptyA
PathIsSystemFolderA
PathRenameExtensionA
PathRemoveBlanksA
PathUnmakeSystemFolderA
PathFileExistsA
PathMakeSystemFolderA
PathFindFileNameA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
gdi32
GetStockObject
RestoreDC
SaveDC
CreateCompatibleDC
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
CreateRectRgn
GetTextExtentPointA
CreateFontIndirectA
SetBkMode
SetTextColor
TextOutA
GetPixel
SetBkColor
GetObjectA
Escape
ExtTextOutA
RectVisible
PtVisible
CreateBitmap
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SetMapMode
GetDeviceCaps
CreateCompatibleBitmap
ExtSelectClipRgn
LineTo
MoveToEx
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
GetViewportExtEx
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
CreateRectRgnIndirect
SetBkColor
PtVisible
RectVisible
TextOutA
ExtTextOutA
GetTextMetricsA
Escape
AbortDoc
CreateFontA
SetBrushOrgEx
CopyMetaFileA
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetObjectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
GetDeviceCaps
CreateRoundRectRgn
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBrushIndirect
CreateHatchBrush
CreateBitmap
CreatePatternBrush
SelectObject
CreatePen
PatBlt
CombineRgn
CreateRectRgn
SelectPalette
FillRgn
gdiplus
GdipCreatePen1
GdipDrawRectangle
GdipCreateFromHDC
GdiplusStartup
GdipDeleteGraphics
GdipSetSmoothingMode
GdipDrawPath
GdipResetClip
GdipDeletePen
GdipSetClipHrgn
GdipDeletePath
wininet
HttpSendRequestA
InternetCloseHandle
InternetTimeToSystemTime
InternetSetCookieA
HttpQueryInfoA
InternetReadFile
InternetTimeFromSystemTime
HttpOpenRequestA
InternetOpenA
InternetConnectA
oleaut32
SafeArrayGetUBound
SafeArrayGetLBound
VariantTimeToSystemTime
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantInit
VariantChangeType
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayUnaccessData
SystemTimeToVariantTime
SafeArrayDestroy
VariantClear
SysAllocString
SafeArrayCreate
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
VarR8FromBool
VarR8FromCy
SysFreeString
SafeArrayAccessData
LHashValOfNameSys
LoadTypeLi
GetActiveObject
UnRegisterTypeLi
VariantCopy
VariantClear
VariantChangeType
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElement
VariantCopyInd
VariantInit
SysAllocString
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
VarDateFromStr
RegisterTypeLi
dbghelp
MakeSureDirectoryPathExists
advapi32
LookupAccountSidA
RegCreateKeyExA
RegQueryValueExA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextA
GetUserNameA
RegSetValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegFlushKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
comdlg32
ChooseColorA
GetFileTitleA
GetOpenFileNameA
GetFileTitleA
PrintDlgA
GetSaveFileNameA
psapi
GetModuleFileNameExA
winhttp
WinHttpTimeFromSystemTime
WinHttpTimeToSystemTime
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
ClosePrinter
DocumentPropertiesA
OpenPrinterA
comctl32
ord17
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_Draw
ord17
ImageList_Destroy
ImageList_Create
oledlg
ord8
winmm
midiOutUnprepareHeader
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutRestart
midiStreamRestart
ws2_32
closesocket
WSAAsyncSelect
recvfrom
ioctlsocket
WSACleanup
recv
getpeername
accept
ntohl
inet_ntoa
wldap32
ord29
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 892KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 472KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ