Static task
static1
Behavioral task
behavioral1
Sample
2d29bd5f466bcbeac9b11d4870e12cffe5a33dc7c5673ca0cc4a448de3829998.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2d29bd5f466bcbeac9b11d4870e12cffe5a33dc7c5673ca0cc4a448de3829998.exe
Resource
win10v2004-20230915-en
General
-
Target
2d29bd5f466bcbeac9b11d4870e12cffe5a33dc7c5673ca0cc4a448de3829998
-
Size
7.5MB
-
MD5
77b5bf1d6c1d2bd818cb962ea8abba9e
-
SHA1
7c47168927b1f155482cb3cba7ec9b4206525c46
-
SHA256
2d29bd5f466bcbeac9b11d4870e12cffe5a33dc7c5673ca0cc4a448de3829998
-
SHA512
13653b2a2f07a961f335ec7e5bb60a7b8b60b1ee8ecd577be3ba88ab316d51df498b3cf84009db63a5dd09324361130dc5a5aa0c8a9b2d431b2f37b058ccb25d
-
SSDEEP
98304:SiJjE8q3uEantW8h0cnIVRA3nBjINVYC0pTUdn5tf33M/YwcbRAT:vJw+bWy9I/YC0Gdn5tf3fFAT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d29bd5f466bcbeac9b11d4870e12cffe5a33dc7c5673ca0cc4a448de3829998
Files
-
2d29bd5f466bcbeac9b11d4870e12cffe5a33dc7c5673ca0cc4a448de3829998.exe windows x86
d688832bf996d4f180ce0dd18b7c6513
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
usbxpress
_MA_Close@4
_MA_Open@8
_MA_FlushBuffers@12
_MA_SetTimeouts@8
_MA_GetProductString1@8
_MA_GetNumDevices@4
_MA_IsDevicesExist@0
_MA_RESETUSB@4
_MA_Read@16
_MA_USB_INIT@4
_MA_Write@16
libxl
xlCreateBookW
kernel32
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetCurrentDirectoryA
GetDriveTypeA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CreateFileA
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
HeapSize
ExitThread
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
RaiseException
HeapReAlloc
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
lstrcpyW
SetErrorMode
GetCurrentDirectoryW
FindResourceExW
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GlobalFlags
FindNextFileW
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetProfileIntW
InterlockedCompareExchange
GetSystemDirectoryW
SearchPathW
GetTempPathW
GetTempFileNameW
GetDateFormatW
GetTimeFormatW
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
GetLastError
WideCharToMultiByte
lstrlenW
InterlockedIncrement
InterlockedDecrement
GetLocaleInfoW
HeapFree
HeapAlloc
GetProcessHeap
lstrlenA
MulDiv
GlobalFree
GlobalReAlloc
GlobalAlloc
GlobalUnlock
GlobalLock
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
GetSystemDefaultLCID
InterlockedExchange
SetThreadPriority
LoadLibraryW
GetModuleHandleW
GetProcAddress
SetLastError
GetTickCount
GetLocalTime
Sleep
WritePrivateProfileStringW
OutputDebugStringW
SetPriorityClass
GetCurrentProcess
lstrcpynW
GetPrivateProfileStringW
RemoveDirectoryW
GetFileType
CopyFileW
FreeLibrary
GetCurrentProcessId
QueryPerformanceCounter
WaitForSingleObject
ResumeThread
SetEvent
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
CreateFileW
CreateEventW
WriteFile
ReadFile
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiW
GetThreadLocale
DeleteFileW
MoveFileW
SuspendThread
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
LoadLibraryExW
CompareStringA
GetPrivateProfileIntW
VirtualProtect
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetModuleFileNameW
GetModuleHandleA
FormatMessageW
LocalFree
FreeResource
GlobalSize
CreateThread
user32
ShowOwnedPopups
SetCursor
GetMessageW
GetMenuItemInfoW
DestroyMenu
SystemParametersInfoW
CharUpperW
RegisterClipboardFormatW
WaitMessage
GetDialogBaseUnits
ValidateRect
PostQuitMessage
GetSysColorBrush
LoadCursorW
UnregisterClassW
DeleteMenu
SetCapture
WindowFromPoint
ReleaseCapture
DestroyIcon
TranslateAcceleratorW
SetMenu
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
IsRectEmpty
SetParent
UnionRect
GetDCEx
LockWindowUpdate
InflateRect
SendMessageW
EnableWindow
InvalidateRect
GetWindowRect
GetDC
IsWindowVisible
SetTimer
KillTimer
GetParent
IsWindow
SetRect
LoadBitmapW
ReleaseDC
DispatchMessageW
TranslateMessage
DrawIcon
AppendMenuW
EnableMenuItem
GetSubMenu
ModifyMenuW
MapDialogRect
GetAsyncKeyState
MapVirtualKeyW
GetKeyNameTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
LoadMenuW
PostMessageW
GetSystemMenu
IsIconic
GetClientRect
LoadIconW
GetSystemMetrics
GetCursorPos
LoadImageW
GetKeyState
RegisterDeviceNotificationW
FillRect
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
PostThreadMessageW
RegisterWindowMessageW
GetIconInfo
DrawTextW
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
GetWindowLongW
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
GetDesktopWindow
RemoveMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
GetMenuStringW
GetMenuState
TabbedTextOutW
DrawTextExW
SetWindowContextHelpId
CharNextW
InvalidateRgn
GetTabbedTextExtentA
FindWindowW
CountClipboardFormats
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
UnregisterClassA
GetWindowRgn
SendNotifyMessageW
GetClipboardData
MapVirtualKeyExW
IsCharLowerW
DestroyCursor
SetCaretPos
GetWindowContextHelpId
SubtractRect
WindowFromDC
EnumChildWindows
IsClipboardFormatAvailable
CharUpperBuffW
CopyAcceleratorTableW
CreateAcceleratorTableW
DestroyAcceleratorTable
GetUpdateRect
FrameRect
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
InvertRect
ShowCaret
HideCaret
GetCaretPos
DestroyCaret
GetMenuDefaultItem
SetMenuDefaultItem
DrawIconEx
DrawFrameControl
DrawEdge
SetClassLongW
EnableScrollBar
CopyImage
DrawStateW
SetCursorPos
MessageBeep
IsMenu
SetWindowRgn
IsZoomed
GetDoubleClickTime
CopyIcon
GetNextDlgGroupItem
RedrawWindow
DrawFocusRect
GrayStringW
ScreenToClient
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
GetSysColor
SetFocus
GetWindow
SetScrollPos
GetScrollPos
GetWindowTextW
GetWindowTextLengthW
CheckDlgButton
SendDlgItemMessageW
IsDialogMessageW
SetWindowTextW
GetDlgCtrlID
SetWindowLongW
MoveWindow
ShowWindow
SetWindowPos
GetFocus
MessageBoxW
GetLastActivePopup
GetWindowThreadProcessId
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
CallWindowProcW
DefWindowProcW
SetWindowPlacement
PtInRect
CopyRect
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
gdi32
SetArcDirection
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
CopyMetaFileW
CreateRectRgn
CombineRgn
SetTextColor
SetBkMode
RectVisible
CreateCompatibleBitmap
CreateBitmap
SetBkColor
StretchBlt
SaveDC
GetClipBox
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
BitBlt
RestoreDC
SetBrushOrgEx
PatBlt
GetDIBColorTable
CreateDIBSection
SetDIBColorTable
SelectObject
DeleteDC
StretchDIBits
SelectPalette
GetDIBits
EndDoc
StartDocW
RealizePalette
CreateCompatibleDC
CreateDCW
CreateRectRgnIndirect
CreateFontIndirectW
CreatePen
GetObjectW
GetDeviceCaps
GetStockObject
GetTextExtentPoint32W
CreateFontW
SelectClipRgn
CreatePatternBrush
GetObjectType
ExtCreatePen
CreateSolidBrush
GetDCOrgEx
GetTextMetricsW
SetRectRgn
GetMapMode
DPtoLP
EnumFontFamiliesExW
GetCharWidthW
GetBkColor
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
TextOutW
ExtTextOutW
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
Escape
DeleteObject
OffsetRgn
SetPixel
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateEllipticRgn
GetTextColor
Polyline
Ellipse
Polygon
Rectangle
RoundRect
LPtoDP
AbortDoc
GetCurrentObject
GetRgnBox
UnrealizeObject
CreatePalette
FillRgn
FrameRgn
GetPaletteEntries
ExtFloodFill
SetPaletteEntries
Arc
CreatePolyPolygonRgn
CreateEllipticRgnIndirect
PolyBezier
GetNearestPaletteIndex
GetSystemPaletteEntries
PtInRegion
GetBoundsRect
SetPixelV
GetRegionData
SetPixelFormat
ChoosePixelFormat
GetViewportOrgEx
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetTextExtentPoint32A
GetWindowOrgEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
GetCurrentPositionEx
ScaleWindowExtEx
comdlg32
GetFileTitleW
winspool.drv
EnumPrintersW
DocumentPropertiesW
ClosePrinter
ord203
OpenPrinterW
DeviceCapabilitiesW
advapi32
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyW
RegSetValueW
RegCloseKey
shell32
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHAppBarMessage
ExtractIconExW
DragAcceptFiles
SHCreateDirectoryExW
ShellExecuteW
SHGetFileInfoW
DragFinish
DragQueryFileW
SHFileOperationW
comctl32
ImageList_GetIconSize
ImageList_ReplaceIcon
ord17
ImageList_DrawEx
ImageList_Remove
ImageList_Add
ImageList_AddMasked
ImageList_Destroy
ImageList_GetImageCount
ImageList_Create
ImageList_GetIcon
shlwapi
PathIsUNCW
PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathStripToRootW
oledlg
OleUIPasteSpecialW
OleUIBusyW
OleUIInsertObjectW
OleUIObjectPropertiesW
ole32
CoRevokeClassObject
OleUninitialize
CoInitialize
CoGetClassObject
CoUninitialize
CoDisconnectObject
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
CoFreeUnusedLibraries
OleInitialize
OleRun
CoCreateInstance
CLSIDFromProgID
OleDuplicateData
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
StgCreateDocfile
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleDraw
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
DoDragDrop
OleLockRunning
OleSetMenuDescriptor
CreateFileMoniker
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
CLSIDFromString
oleaut32
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
SafeArrayDestroy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
VariantChangeType
SysStringByteLen
VariantCopy
VariantClear
VariantInit
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrCmp
VarUdateFromDate
VariantChangeTypeEx
ws2_32
send
setsockopt
WSAGetLastError
select
bind
gethostbyname
inet_addr
htons
recvfrom
sendto
closesocket
recv
WSAAsyncSelect
connect
WSASetLastError
socket
accept
htonl
WSACleanup
WSAStartup
gdiplus
GdipFillPath
GdipFillEllipse
GdipFillRectangle
GdipGraphicsClear
GdipDrawPath
GdipDrawEllipse
GdipDrawRectangle
GdipDrawArc
GdipDrawLine
GdipGetDpiY
GdipSetPageUnit
GdipGetWorldTransform
GdipMultiplyWorldTransform
GdipResetWorldTransform
GdipSetWorldTransform
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipSetInterpolationMode
GdipGetInterpolationMode
GdipGetCompositingMode
GdipSetCompositingMode
GdipCreateFromHDC
GdipTransformPath
GdipAddPathPath
GdipSetTextureWrapMode
GdipAddPathEllipse
GdipAddPathRectangle
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine2
GdipAddPathLine
GdipClosePathFigure
GdipStartPathFigure
GdipSetPathFillMode
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipGetStringFormatFlags
GdipSetStringFormatFlags
GdipSetPenDashArray
GdipSetPenDashOffset
GdipSetPenDashStyle
GdipSetPenMiterLimit
GdipSetPenLineJoin
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipGetBrushType
GdipIsMatrixIdentity
GdipTransformMatrixPoints
GdipRotateMatrix
GdipScaleMatrix
GdipTranslateMatrix
GdipMultiplyMatrix
GdipSetMatrixElements
GdipDeleteBrush
GdipFillRegion
GdipSetImageAttributesColorMatrix
GdipDeleteFontFamily
GdipGetRegionHRgn
GdipCombineRegionRegion
GdipCombineRegionPath
GdipGetPathWorldBounds
GdipSetPathGradientWrapMode
GdipScalePathGradientTransform
GdipTranslatePathGradientTransform
GdipMultiplyPathGradientTransform
GdipSetPathGradientTransform
GdipGetPathGradientTransform
GdipSetPathGradientPresetBlend
GdipSetPathGradientCenterPoint
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount
GdipSetPathGradientCenterColor
GdipDeletePath
GdipCreatePath
GdipSetLineWrapMode
GdipRotateLineTransform
GdipScaleLineTransform
GdipTranslateLineTransform
GdipMultiplyLineTransform
GdipGetLineTransform
GdipSetLineTransform
GdipSetLinePresetBlend
GdipTranslateTextureTransform
GdipGetTextureTransform
GdipSetTextureTransform
GdipDeleteMatrix
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToStream
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipDrawString
GdipMeasureString
GdipDrawImageRectRect
GdipSetClipPath
GdipSetClipRegion
GdipResetClip
GdipGetEmHeight
GdipCloneBrush
GdipCreateRegionPath
GdipCreatePathGradientFromPath
GdipCreateLineBrush
GdipCreateTextureIAI
GdipCreateSolidFill
GdipCreateBitmapFromHICON
GdipDeleteFont
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeleteRegion
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeletePen
GdipCreateMatrix
GdipCreatePen2
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneRegion
GdipCloneBitmapArea
GdipGetFontSize
GdipGetCellDescent
GdipGetMatrixElements
GdipGetFamily
GdipGetFontStyle
odbc32
ord5
ord117
ord141
ord110
ord2
ord1
ord15
ord9
ord14
ord3
ord61
ord16
ord20
ord108
ord48
ord49
ord111
ord119
ord12
ord46
ord18
ord13
ord59
ord68
ord44
ord145
ord150
ord51
winmm
PlaySoundW
Sections
.text Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1012KB - Virtual size: 1011KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ