Static task
static1
Behavioral task
behavioral1
Sample
ed8797e6b44d366e497e8ccb3cc4c14953915c1a1adac87bed2b645e7c2be429.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ed8797e6b44d366e497e8ccb3cc4c14953915c1a1adac87bed2b645e7c2be429.exe
Resource
win10v2004-20230915-en
General
-
Target
ed8797e6b44d366e497e8ccb3cc4c14953915c1a1adac87bed2b645e7c2be429
-
Size
702KB
-
MD5
5240988487b73b181895c157ff3728db
-
SHA1
29fca23b234d4ade5697e155d1bf89a490668610
-
SHA256
ed8797e6b44d366e497e8ccb3cc4c14953915c1a1adac87bed2b645e7c2be429
-
SHA512
ce662bd34a167fdb30be00682c0a80e5e79eb5e7dd9adcc1e5ca21a97d5002778aa70af6e7b300ef11fefed8d069d0e2265ab2e88be98748b79abaa2fa99b6ee
-
SSDEEP
12288:FIHqjT7r06/lLOJS43b4euVXs1K3Q5zbGg9vNTCmH+NwJTQdWINwHCil:FIHqjT7rHtLoyXs1K3Q5bfXTCmH+NwCY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed8797e6b44d366e497e8ccb3cc4c14953915c1a1adac87bed2b645e7c2be429
Files
-
ed8797e6b44d366e497e8ccb3cc4c14953915c1a1adac87bed2b645e7c2be429.exe windows x86
e76a24d0bf156073128de786ac34a428
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
LoadResource
lstrcmpiW
Sleep
ReadFile
SetFilePointer
LockResource
GetVersionExW
GetModuleHandleW
CreateProcessW
LocalFree
WaitForSingleObject
GetCurrentProcess
GetACP
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
SetEndOfFile
GetLongPathNameW
ReleaseMutex
CreateDirectoryW
GetFullPathNameW
SetFileAttributesW
DeleteFileW
GetFileSizeEx
DeviceIoControl
FormatMessageW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
GetLocalTime
FindFirstFileW
FindNextFileW
FindResourceW
InitializeCriticalSection
FindClose
GetFileAttributesExW
ExpandEnvironmentStringsW
WideCharToMultiByte
GetFileAttributesW
lstrlenW
GetTickCount
InterlockedExchangeAdd
InterlockedExchange
GetCurrentProcessId
HeapAlloc
VirtualQuery
GetLogicalDriveStringsW
GetEnvironmentVariableW
GetModuleFileNameW
QueryDosDeviceW
WriteFile
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentThreadId
MapViewOfFile
CreateFileMappingW
GetFileSize
CloseHandle
UnmapViewOfFile
CreateFileW
GetProcessHeap
DeleteCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
HeapFree
OpenProcess
CreateMutexW
user32
SetWindowPos
GetFocus
GetActiveWindow
GetSystemMetrics
DefWindowProcW
GetParent
GetDesktopWindow
GetClassNameW
SetFocus
GetForegroundWindow
GetWindowRect
GetWindowThreadProcessId
LoadIconW
AttachThreadInput
WindowFromPoint
GetShellWindow
ole32
OleInitialize
OleUninitialize
msvcp140
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xbad_alloc@std@@YAXXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
2345miniui
?OnMouseLeaveDialog@RCMiniUIDialogView@RC@@UAEXXZ
?OnFirstLayouted@RCMiniUIDialogView@RC@@UAEXXZ
?OnDropFiles@RCMiniUIDialogView@RC@@UAEXABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?OnMouseEnterDialog@RCMiniUIDialogView@RC@@UAEXXZ
?OnAnimateShowEnded@RCMiniUIDialogView@RC@@UAEXXZ
?OnAnimateHideEnded@RCMiniUIDialogView@RC@@UAEXXZ
?OnDialogSkinChanged@RCMiniUIDialogView@RC@@UAEXXZ
?ProcessWindowMessage@RCMiniUIDialog@RC@@UAEHPAUHWND__@@IIJAAJK@Z
?OnFinalMessage@?$CDialogImplBaseT@VRCMiniAtlWindow@@@ATL@@UAEXPAUHWND__@@@Z
?GetDialogProc@?$CDialogImplBaseT@VRCMiniAtlWindow@@@ATL@@UAEP6GHPAUHWND__@@IIJ@ZXZ
?EndDialog@?$CDialogImpl@VRCMiniUIDialog@RC@@VRCMiniAtlWindow@@@ATL@@QAEHH@Z
?SetIcon@RCMiniAtlWindow@@QAEPAUHICON__@@PAU2@H@Z
??0RCMiniUIDialog@RC@@QAE@I@Z
??1RCMiniUIDialog@RC@@UAE@XZ
?GetHWND@RCMiniUIDialog@RC@@UAEPAUHWND__@@XZ
?WindowDefKeyPressed@RCMiniUIDialog@RC@@EAE_NIII@Z
?GetRootView@RCMiniUIDialogView@RC@@UAEPAVRCMiniUIView@2@XZ
?GetToolTip@RCMiniUIDialogView@RC@@UAEAAV?$CToolTipCtrlT@VCWindow@ATL@@@WTL@@XZ
?OnMouseMoveInDialog@RCMiniUIDialogView@RC@@UAEXABVCPoint@WTL@@I@Z
?OnDialogTimer@RCMiniUIDialogView@RC@@UAE_NIPAX@Z
?SetItemText@RCMiniUIDialogView@RC@@QAE_NIABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetItemAttribute@RCMiniUIDialogView@RC@@QAE_NIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetViewByID@RCMiniUIDialogView@RC@@QBEPAVRCMiniUIView@2@H@Z
?IsChecked@RCMiniUiImgChkBox@RC@@QAE_NXZ
?ReflectNotifications@?$CWindowImplRoot@VRCMiniAtlWindow@@@ATL@@QAEJIIJAAH@Z
?DoModal@RCMiniUIDialog@RC@@QAEHPAUHWND__@@J@Z
?OnEnter@RCMiniUIDialogView@RC@@UAEXXZ
?OnEsc@RCMiniUIDialogView@RC@@UAEXXZ
?GetGlobalSkinPool@RCMiniUIManner@RC@@SAPAVRCMiniUISkinPoolInterface@2@XZ
?GetGlobalStylePool@RCMiniUIManner@RC@@SAPAVRCMiniUIStylePoolInterface@2@XZ
?SetRenderFactory@RCMiniUIAppModule@RC@@QAE_NPAVRCMiniUIRenderFactory@2@@Z
?Term@RCMiniUIAppModule@RC@@QAEXXZ
?Init@RCMiniUIAppModule@RC@@QAEXPAUHINSTANCE__@@@Z
?Instance@RCMiniUIAppModule@RC@@SAAAV12@XZ
?InitRuntimeObject@RCMiniUIObjectFactory@RC@@SAXXZ
?GetGolobalStringPool@RCMiniUIResourceManager@RC@@SAPAVRCMiniUIStringPoolInterface@2@XZ
?GetGolobalFontPool@RCMiniUIResourceManager@RC@@SAPAVRCMiniUIFontPoolInterface@2@XZ
?CreateBitmap@RCMiniUIRenderFactorySkia@RC@@UAEPAVRCMiniUIBitmap@2@XZ
?CreateCanvas@RCMiniUIRenderFactorySkia@RC@@UAEPAVRCMiniUICanvas@2@HH_N@Z
?Initialize@RCMiniUIRenderFactorySkia@RC@@UAE_NXZ
??1RCMiniUIRenderFactorySkia@RC@@UAE@XZ
??0RCMiniUIRenderFactorySkia@RC@@QAE@XZ
?BeforeWindowDestroy@RCMiniUIDialogView@RC@@UAEXXZ
comctl32
InitCommonControlsEx
vcruntime140
_CxxThrowException
_except_handler4_common
_purecall
strstr
__std_exception_copy
__CxxFrameHandler3
wcsstr
memmove
memcpy
wcschr
wcsrchr
__RTDynamicCast
memchr
memset
__std_exception_destroy
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
malloc
calloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo
_errno
terminate
_invalid_parameter_noinfo_noreturn
_controlfp_s
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_register_onexit_function
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__stdio_common_vswscanf
__p__commode
rewind
__stdio_common_vsprintf_s
fwrite
fread
__stdio_common_vswprintf
fclose
_wfopen_s
__stdio_common_vsprintf
ftell
fseek
api-ms-win-crt-convert-l1-1-0
_wtoi
atoi
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-time-l1-1-0
_localtime64
_time64
api-ms-win-crt-string-l1-1-0
isalnum
towlower
_stricmp
_wcsnicmp
_wcsicmp
wcsncpy
towupper
api-ms-win-crt-filesystem-l1-1-0
_splitpath_s
api-ms-win-crt-math-l1-1-0
modf
_dtest
__setusermatherr
_except1
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 429KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ