Static task
static1
Behavioral task
behavioral1
Sample
9faf28e7baeee6c2df13dcb247a170c48a55bd2da10e9dcb0dcdfc6a178e330d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9faf28e7baeee6c2df13dcb247a170c48a55bd2da10e9dcb0dcdfc6a178e330d.exe
Resource
win10v2004-20230703-en
General
-
Target
9faf28e7baeee6c2df13dcb247a170c48a55bd2da10e9dcb0dcdfc6a178e330d
-
Size
3.1MB
-
MD5
f3ad6923ef7d81d646c1a5c9d9f96ccd
-
SHA1
df0e12c0b1737dcde314d6a1b16bb0e85fbee8ae
-
SHA256
9faf28e7baeee6c2df13dcb247a170c48a55bd2da10e9dcb0dcdfc6a178e330d
-
SHA512
d8352ac31b12bd9948616d0251d2bbfc5941d1c4ea0bfdd67c28f60a6397da89274bb443074a1b5efbff5d93c9e44259dbf16c9abd01a53261d1eed402fe4c10
-
SSDEEP
98304:OlgJZ4XTIIBmAzav4oGrvUTtC8J1XwLeE4Og2kohJivNxo+O:Og4fxmwycAOrPivNxo+O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9faf28e7baeee6c2df13dcb247a170c48a55bd2da10e9dcb0dcdfc6a178e330d
Files
-
9faf28e7baeee6c2df13dcb247a170c48a55bd2da10e9dcb0dcdfc6a178e330d.exe windows x86
5eca463351655712161b2adca80eec45
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htons
getsockopt
getpeername
recv
closesocket
socket
connect
WSASetLastError
shutdown
bind
freeaddrinfo
getaddrinfo
ntohs
WSACleanup
WSAStartup
accept
listen
ioctlsocket
__WSAFDIsSet
select
send
sendto
recvfrom
htonl
ntohl
getsockname
setsockopt
WSAGetLastError
WSAIoctl
gethostname
kernel32
GlobalLock
GlobalAlloc
GlobalSize
CopyFileW
GlobalFree
DeactivateActCtx
CreateActCtxW
ReleaseActCtx
ActivateActCtx
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
GetThreadLocale
LocalAlloc
GlobalReAlloc
SetEnvironmentVariableA
LocalReAlloc
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
lstrcmpA
GetPrivateProfileIntW
FindNextFileW
FindFirstFileW
lstrlenA
GlobalFlags
GlobalGetAtomNameW
DeleteFileW
lstrcmpiW
LockFile
UnlockFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
GetNumberFormatW
GetFileAttributesExW
GetFileAttributesW
GetFileSizeEx
GetFileTime
SetErrorMode
GetTempFileNameW
GetTempPathW
GetProfileIntW
SearchPathW
FindResourceExW
CompareStringW
GetDriveTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
CreateFileW
GetProcessHeap
SetEndOfFile
GetConsoleCP
GetCurrentDirectoryW
IsValidCodePage
GetOEMCP
GetACP
HeapSize
GetLocaleInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
HeapCreate
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
GetCPInfo
LCMapStringW
GetTimeZoneInformation
GetConsoleMode
SetConsoleMode
GlobalUnlock
SetConsoleCtrlHandler
ExitProcess
CreateFileA
WriteConsoleW
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
FindFirstFileExA
GetDriveTypeA
FindClose
SetFilePointer
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
ExitThread
GetSystemTimeAsFileTime
RtlUnwind
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetStartupInfoW
HeapSetInformation
GetCommandLineW
DecodePointer
EncodePointer
InterlockedIncrement
FlushConsoleInputBuffer
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetVersion
GetModuleHandleA
GetCurrentThreadId
InterlockedDecrement
CreateThread
SetThreadAffinityMask
CreateEventA
SetThreadPriority
SuspendThread
ResumeThread
TerminateThread
PulseEvent
RaiseException
SetThreadIdealProcessor
GetModuleFileNameW
lstrcpynW
ResetEvent
SetEvent
LoadLibraryA
CopyFileA
CreateMutexW
GetModuleHandleW
GetModuleFileNameA
GetFullPathNameA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetUserDefaultLangID
GetPrivateProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileStringW
GetPrivateProfileStringA
GetWindowsDirectoryW
lstrcpyW
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
GetTickCount
LoadLibraryW
GetProcAddress
FreeLibrary
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
ReadFile
FormatMessageA
Sleep
ExpandEnvironmentStringsA
WaitForSingleObject
CloseHandle
GetVersionExW
SleepEx
GetLastError
SetLastError
InterlockedExchange
LeaveCriticalSection
TryEnterCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetCriticalSectionSpinCount
FindResourceW
LoadResource
LockResource
SizeofResource
FlushFileBuffers
FormatMessageW
LocalFree
ReadConsoleInputA
MulDiv
HeapQueryInformation
GlobalHandle
user32
GetDoubleClickTime
SubtractRect
DrawIcon
GetWindowRgn
TranslateAcceleratorW
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
DrawEdge
SetClassLongW
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
PostThreadMessageW
DrawIconEx
CopyImage
NotifyWinEvent
EnableScrollBar
HideCaret
InvertRect
CreatePopupMenu
GetMenuDefaultItem
CharUpperW
IsIconic
WaitMessage
EnumDisplayMonitors
DeleteMenu
RegisterClipboardFormatW
RealChildWindowFromPoint
UnregisterClassW
GetSysColorBrush
GetMenuItemInfoW
ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
GetNextDlgGroupItem
SetWindowContextHelpId
MapDialogRect
MapVirtualKeyW
GetKeyNameTextW
CharNextW
InvalidateRgn
CopyAcceleratorTableW
GetDesktopWindow
CreateDialogIndirectParamW
EndDialog
IntersectRect
GetWindowThreadProcessId
IsWindowEnabled
ShowWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
CharUpperBuffW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
GetMenu
SetWindowPos
EndPaint
BeginPaint
UnhookWindowsHookEx
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
RemoveMenu
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
SystemParametersInfoW
ReleaseCapture
SetCapture
GetCapture
GetCursorPos
CallWindowProcW
GetComboBoxInfo
GetWindowDC
SetRectEmpty
IsMenu
RedrawWindow
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
EqualRect
IsRectEmpty
SetRect
LoadBitmapW
GetWindow
MoveWindow
UpdateWindow
FindWindowA
LoadIconW
IsWindowVisible
GetSystemMenu
AppendMenuW
PostQuitMessage
MessageBoxW
CopyIcon
MessageBeep
IsWindow
GetMessagePos
SetWindowLongW
ScreenToClient
PtInRect
SetLayeredWindowAttributes
GetAsyncKeyState
GetKeyState
GetSystemMetrics
UpdateLayeredWindow
LoadCursorW
KillTimer
GetUpdateRect
IsClipboardFormatAvailable
SetMenuDefaultItem
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
MonitorFromPoint
UnionRect
MapVirtualKeyExW
IsCharLowerW
EmptyClipboard
SetTimer
DestroyMenu
LoadMenuW
DestroyCursor
LoadImageW
GetIconInfo
GetDC
ReleaseDC
GetSysColor
GetSubMenu
TrackPopupMenuEx
CloseClipboard
SetClipboardData
OpenClipboard
UnpackDDElParam
ReuseDDElParam
DispatchMessageW
InsertMenuItemW
PostMessageW
SetCursor
DestroyIcon
GetWindowLongW
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageW
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
DrawStateW
GetMessageTime
gdi32
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CreateRectRgnIndirect
GetClipBox
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SelectClipRgn
CreatePalette
GetPaletteEntries
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
OffsetRgn
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SetLayout
PtVisible
GetTextExtentPoint32W
CreateFontIndirectW
SetBrushOrgEx
CreateDIBSection
StretchBlt
GetDIBColorTable
SetDIBColorTable
GetCurrentObject
GetTextMetricsW
GetObjectW
GetPixel
SetPixel
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
GetStockObject
DeleteObject
BitBlt
GetLayout
SetTextAlign
IntersectClipRect
SelectObject
CreateCompatibleDC
GetNearestPaletteIndex
CreateCompatibleBitmap
SaveDC
CreateDCW
CopyMetaFileW
GetDeviceCaps
GetTextColor
GetBkColor
SetBkMode
CreatePen
Rectangle
MoveToEx
LineTo
CreateSolidBrush
Escape
ExtTextOutW
TextOutW
RectVisible
ExcludeClipRect
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueW
RegSetValueExW
RegCreateKeyW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegEnumKeyExW
RegCloseKey
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
shell32
DragQueryFileW
ShellExecuteW
ShellExecuteA
SHGetFileInfoW
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW
ShellExecuteExW
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListW
comctl32
_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
StrCatW
PathRemoveFileSpecW
ole32
DoDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoCreateGuid
CreateStreamOnHGlobal
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoGetClassObject
StgOpenStorageOnILockBytes
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleLockRunning
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoInitialize
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
oleaut32
OleCreateFontIndirect
SysAllocString
SafeArrayDestroy
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocStringLen
VariantClear
SysFreeString
VarBstrFromDate
VariantInit
oledlg
OleUIBusyW
gdiplus
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipCloneBrush
GdipCreateFont
GdipDrawImageRectRect
GdipDrawString
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeletePrivateFontCollection
GdipNewPrivateFontCollection
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI
winmm
PlaySoundW
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 599KB - Virtual size: 599KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ