Static task
static1
Behavioral task
behavioral1
Sample
fb2b40703d6d541d798200d3579c3d63961d0e9fdde5911a2f7a14bb0c89cbb4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fb2b40703d6d541d798200d3579c3d63961d0e9fdde5911a2f7a14bb0c89cbb4.exe
Resource
win10v2004-20230915-en
General
-
Target
fb2b40703d6d541d798200d3579c3d63961d0e9fdde5911a2f7a14bb0c89cbb4
-
Size
2.8MB
-
MD5
b4313efec12efd62055f4b0ecb1df256
-
SHA1
fa98c76ccbb4a4bddff4d0c24b2e9670f5f26233
-
SHA256
fb2b40703d6d541d798200d3579c3d63961d0e9fdde5911a2f7a14bb0c89cbb4
-
SHA512
91618be01462e58be7d11161fbe7a9012b246f6a9e88333d24dbc159add0c56d0dae5db2600e001e120465303d34410e2eb6027ed8728fa12db449f01495f202
-
SSDEEP
49152:y4M22PZ8Y0JL5b0NaXYCP3U1sm8Uid8ms2qYyf8XmE0ZAlBfZIt9LQm:1MLqYI5b0NaXYCPU1sm8UC/qYyf8yZAl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb2b40703d6d541d798200d3579c3d63961d0e9fdde5911a2f7a14bb0c89cbb4
Files
-
fb2b40703d6d541d798200d3579c3d63961d0e9fdde5911a2f7a14bb0c89cbb4.exe windows x86
fe8ed41052c161917bf855535ad2824f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
VirtualFree
GetVersionExW
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetConsoleCP
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetConsoleMode
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
GetStdHandle
ExitProcess
GetFileType
SetStdHandle
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetStringTypeW
LCMapStringW
CompareStringW
GetExitCodeThread
SwitchToThread
QueryPerformanceFrequency
TryEnterCriticalSection
OutputDebugStringW
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
GetTimeZoneInformation
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
GetUserDefaultLCID
GetTempFileNameA
GetProfileIntA
SearchPathA
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
IsDebuggerPresent
GetFileAttributesExA
FileTimeToLocalFileTime
SetErrorMode
GetTempPathA
FindResourceExW
GetWindowsDirectoryA
GetVolumeInformationA
lstrcmpiA
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
FindClose
GetFileSize
GetFileAttributesA
DeleteFileA
GetCurrentDirectoryA
VerifyVersionInfoA
VerSetConditionMask
lstrcpyA
GetCPInfo
GetOEMCP
VirtualProtect
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GetACP
GetThreadLocale
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
ResumeThread
SetThreadPriority
GetCurrentThread
GetCurrentProcessId
GetVersionExA
lstrcmpA
ReleaseSemaphore
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
EncodePointer
FindResourceA
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeResource
SetLastError
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
GetLocalTime
WritePrivateProfileStringA
GetUserDefaultUILanguage
GetProcessHeap
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
SetEvent
WaitCommEvent
GetCommProperties
WriteFile
ClearCommError
CancelIo
GetOverlappedResult
WaitForSingleObject
ReadFile
ResetEvent
SetCommState
GetCommState
CreateFileA
PurgeComm
SetCommMask
SetCommTimeouts
GetCommTimeouts
SetupComm
CloseHandle
CreateEventA
GetCurrentThreadId
MultiByteToWideChar
OutputDebugStringA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetModuleFileNameA
GetTickCount
Sleep
GetPrivateProfileIntA
FindResourceW
LoadResource
LockResource
SizeofResource
ReadConsoleW
user32
SetCapture
WaitMessage
IntersectRect
EnumDisplayMonitors
LoadCursorW
SetLayeredWindowAttributes
LoadImageW
DestroyIcon
TrackMouseEvent
GetAsyncKeyState
CopyImage
RealChildWindowFromPoint
ClientToScreen
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
LoadCursorA
GetSysColorBrush
InflateRect
GetMenuItemInfoA
DestroyMenu
GetSystemMetrics
SetCursor
ShowOwnedPopups
GetCursorPos
GetMessageA
MapDialogRect
SetWindowContextHelpId
SystemParametersInfoA
MessageBeep
IsZoomed
PostQuitMessage
GetWindowThreadProcessId
ReleaseDC
GetDC
MapVirtualKeyA
GetKeyNameTextA
FillRect
InvalidateRect
DrawStateA
OffsetRect
SetRectEmpty
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
ReleaseCapture
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
EnableWindow
SendMessageA
CopyAcceleratorTableA
PostMessageA
GetClientRect
CopyRect
GetSysColor
LoadImageA
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
UnpackDDElParam
ReuseDDElParam
MonitorFromPoint
OpenClipboard
CloseClipboard
ToAsciiEx
SetClipboardData
EmptyClipboard
IsRectEmpty
CharUpperA
LoadMenuW
GetSystemMenu
WindowFromPoint
ScrollWindow
RedrawWindow
DeleteMenu
KillTimer
BringWindowToTop
LoadAcceleratorsA
LoadMenuA
CreatePopupMenu
InsertMenuItemA
SetParent
GetParent
GetFocus
TranslateAcceleratorA
SetWindowsHookExA
UnhookWindowsHookEx
IsWindow
CallNextHookEx
UnregisterClassA
LoadIconW
SetTimer
TranslateMessage
DispatchMessageA
ModifyMenuA
GetSubMenu
CheckMenuItem
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
SubtractRect
InsertMenuA
AppendMenuA
RemoveMenu
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongA
GetDesktopWindow
RegisterWindowMessageA
PeekMessageA
GetMessagePos
GetMessageTime
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsMenu
IsChild
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
IsIconic
GetDlgCtrlID
SetFocus
GetCapture
GetMenu
SetMenu
TrackPopupMenu
UpdateWindow
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
ValidateRect
EnumChildWindows
RegisterClipboardFormatA
LockWindowUpdate
SetClassLongA
SetWindowRgn
NotifyWinEvent
PostThreadMessageA
GetKeyboardLayout
GetKeyboardState
MapWindowPoints
CharNextA
InvalidateRgn
SetRect
GetNextDlgGroupItem
GetMenuDefaultItem
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
DrawIcon
SetMenuDefaultItem
UpdateLayeredWindow
UnionRect
CharUpperBuffA
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsCharLowerA
MapVirtualKeyExA
GetWindowRgn
DestroyCursor
CreateMenu
GetDoubleClickTime
GetComboBoxInfo
GetUpdateRect
GetKeyState
gdi32
CreatePen
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextMetricsA
CreateHatchBrush
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
GetDIBits
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
GetRgnBox
OffsetRgn
GetTextColor
GetBkColor
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
LPtoDP
Rectangle
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetTextFaceA
SetPixelV
ExtTextOutA
GetTextExtentPoint32A
CreateFontIndirectA
CreateCompatibleDC
BitBlt
CreateRectRgnIndirect
GetStockObject
DeleteObject
CreateSolidBrush
CreateBitmap
GetObjectA
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCA
CopyMetaFileA
CreateCompatibleBitmap
PatBlt
DeleteDC
msimg32
AlphaBlend
TransparentBlt
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegDeleteValueA
RegCloseKey
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegEnumValueA
RegOpenKeyExA
shell32
ShellExecuteA
SHGetFileInfoA
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHAppBarMessage
DragFinish
DragQueryFileA
SHGetSpecialFolderLocation
comctl32
InitCommonControlsEx
shlwapi
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
StrFormatKBSizeA
uxtheme
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetThemePartSize
GetWindowTheme
ole32
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
RegisterDragDrop
CoLockObjectExternal
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleLockRunning
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
CoDisconnectObject
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
RevokeDragDrop
oleaut32
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
VarDateFromStr
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
SafeArrayDestroy
SysAllocStringByteLen
oledlg
ord8
gdiplus
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipFree
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDevRegKey
SetupDiGetClassDevsA
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 425KB - Virtual size: 425KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ