Static task
static1
Behavioral task
behavioral1
Sample
d95fcd3edd92df7542466879b4cbe7add6fefd52c9d9dcac38ac2fed2b3c15ed.exe
Resource
win7-20230831-en
General
-
Target
d95fcd3edd92df7542466879b4cbe7add6fefd52c9d9dcac38ac2fed2b3c15ed
-
Size
11.7MB
-
MD5
33bc2920c32ef6846d9724e617b9f2a0
-
SHA1
d9aabccf5dc7b174f5801343c651e1ed9752004c
-
SHA256
d95fcd3edd92df7542466879b4cbe7add6fefd52c9d9dcac38ac2fed2b3c15ed
-
SHA512
81e3a443dd43355a5aa25e7aaba59b1f3b275b53c1e1d751f61dabaebcf7844e04f1ab781d56f8f4d7e8807170a27bf7cd9d8274221e391575f79aae564bafe7
-
SSDEEP
196608:T0OFkXdNvMXP8ac8Q/MtC8QW+CjjL25xh0Cwb87koAqaDUfqG2FkgxJCjaASLWe0:TL3c8EMtClW+UO530CgWko50GxyCjC6L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d95fcd3edd92df7542466879b4cbe7add6fefd52c9d9dcac38ac2fed2b3c15ed
Files
-
d95fcd3edd92df7542466879b4cbe7add6fefd52c9d9dcac38ac2fed2b3c15ed.exe windows x86
b73d8261c1f0b26c063a1e80636d2df7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetStartupInfoA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
CreateThread
HeapDestroy
MultiByteToWideChar
lstrcatW
lstrlenW
lstrcmpA
lstrlenA
InterlockedDecrement
InterlockedIncrement
LocalSize
DeleteFileA
GetModuleFileNameA
HeapFree
WritePrivateProfileStringA
GetPrivateProfileStringA
CreateFileA
lstrcpyA
lstrcatA
MulDiv
DeleteCriticalSection
RtlMoveMemory
HeapAlloc
GetProcessHeap
VirtualProtect
lstrcpynW
WriteFile
GetTickCount
IsBadReadPtr
HeapReAlloc
ExitProcess
GetModuleHandleA
WaitForSingleObject
Sleep
SetEvent
CreateEventW
GetModuleFileNameW
GetCommandLineW
GetModuleHandleW
GlobalUnlock
GlobalLock
GlobalAlloc
RtlZeroMemory
GetAtomNameW
WideCharToMultiByte
CloseHandle
HeapCreate
ResetEvent
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
VirtualAlloc
GetFileSize
GetTickCount
GetTempPathA
Sleep
VirtualProtectEx
WideCharToMultiByte
LocalAlloc
lstrlenW
LocalSize
GetLocalTime
GetCurrentDirectoryA
FreeLibrary
LoadLibraryA
LCMapStringA
FlushFileBuffers
ReadFile
MapViewOfFile
LCMapStringW
IsBadCodePtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
GetOEMCP
GetCommandLineA
GetVersion
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetModuleHandleA
SetStdHandle
RtlMoveMemory
LocalFree
GlobalAlloc
GlobalLock
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RaiseException
GlobalUnlock
GlobalFree
LoadLibraryW
GetProcAddress
MultiByteToWideChar
CreateFileMappingA
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
user32
GetMessageA
PeekMessageA
ScreenToClient
GetFocus
GetIconInfo
CopyIcon
GetClassNameW
PostMessageW
ShowWindow
DefWindowProcW
CreateMDIWindowW
DialogBoxParamW
CreateDialogParamW
EndDialog
DialogBoxIndirectParamW
DestroyWindow
SetClassLongW
GetClassLongW
CreateDialogIndirectParamW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
ReleaseDC
GetDC
MessageBoxA
BeginPaint
EndPaint
TrackMouseEvent
GetDlgItem
DispatchMessageW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
TranslateMDISysAccel
IsChild
GetMessageW
UpdateLayeredWindow
WindowFromDC
RegisterWindowMessageW
ValidateRect
DrawMenuBar
SetMenu
GetMenu
GetSystemMetrics
IsZoomed
IsIconic
SetRect
SetWindowRgn
SystemParametersInfoW
EnumPropsExW
CheckMenuItem
RemovePropW
GetPropA
GetPropW
SetPropA
SetPropW
KillTimer
SetTimer
MessageBoxW
SetWindowTextW
SetParent
DispatchMessageA
MenuItemFromPoint
GetMenuDefaultItem
GetMenuState
GetMenuItemRect
GetMenuStringW
TrackPopupMenu
SetForegroundWindow
CheckMenuRadioItem
GetMenuItemID
GetSubMenu
SetMenuInfo
InsertMenuW
AppendMenuW
GetParent
SetWindowLongW
GetAsyncKeyState
GetCursorPos
GetWindowThreadProcessId
FindWindowA
GetWindowRect
SetWindowPos
EnableWindow
IsWindowVisible
IsWindowEnabled
GetSysColor
DestroyAcceleratorTable
DestroyIcon
LoadCursorW
ReleaseCapture
SetCapture
GetClientRect
CallWindowProcA
CreateWindowExA
LoadBitmapA
RegisterHotKey
SendMessageA
SetWindowLongA
UnregisterHotKey
SetCursor
DestroyCursor
SendMessageW
GetMenuItemInfoW
GetMenuItemCount
DestroyMenu
GetMenuInfo
LoadMenuW
GetSystemMenu
CreatePopupMenu
CreateMenu
GetWindowLongW
GetWindowTextW
GetWindowTextLengthW
InvalidateRect
GetAncestor
MoveWindow
UpdateWindow
GetNextDlgTabItem
SetFocus
wsprintfA
SetMenuDefaultItem
RemoveMenu
SetMenuItemInfoW
DrawIconEx
LoadImageW
CreateIconFromResourceEx
LoadIconW
RemovePropA
PostQuitMessage
FindWindowExW
IsWindow
CallWindowProcW
EnumWindows
GetClassNameA
GetWindowLongA
GetWindowRect
GetAncestor
UpdateLayeredWindow
ReleaseDC
IsWindow
CallWindowProcA
TrackMouseEvent
ShowWindow
MessageBoxA
wsprintfA
GetCursorPos
GetClipboardData
GetMessageA
TranslateMessage
DispatchMessageA
OpenClipboard
SendMessageA
EnumChildWindows
GetPropA
SetPropA
CreateWindowExA
PeekMessageA
GetDC
CloseClipboard
GetSystemMetrics
gdi32
DeleteObject
DeleteDC
SetTextColor
SetBkMode
SetBkColor
GetTextMetricsA
CreateRoundRectRgn
BitBlt
CreateCompatibleDC
CreateDIBSection
GetStretchBltMode
SetStretchBltMode
StretchBlt
GetStockObject
CreateSolidBrush
GetObjectW
CreateFontIndirectW
CreatePatternBrush
GetDIBits
CreateFontA
GetDeviceCaps
TranslateCharsetInfo
SelectObject
CreateDIBSection
DeleteDC
CreateCompatibleDC
DeleteObject
SelectObject
gdiplus
GdipGetPropertyItem
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateFromHWND
GdipGetImageGraphicsContext
GdipCreateFont
GdipCreateFontFromLogfontW
GdipDeletePrivateFontCollection
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCloneFont
GdipGetLogFontW
GdipGetLogFontA
GdipGetFamily
GdipGetFontStyle
GdipGetFontSize
GdipGetFontUnit
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipCreatePath
GdipCreatePath2
GdipClonePath
GdipResetPath
GdipGetPropertyItemSize
GdipSetPathFillMode
GdipGetPointCount
GdipGetPathData
GdipStartPathFigure
GdipClosePathFigure
GdipClosePathFigures
GdipSetPathMarker
GdipClearPathMarkers
GdipReversePath
GdipGetPathLastPoint
GdipAddPathLine
GdipAddPathArc
GdiplusStartup
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathRectangle
GdipAddPathEllipse
GdipAddPathPie
GdipAddPathPolygon
GdipAddPathPath
GdipAddPathString
GdipTransformPath
GdipGetPathWorldBounds
GdipFlattenPath
GdipWidenPath
GdipWindingModeOutline
GdipWarpPath
GdipIsVisiblePathPoint
GdipIsOutlineVisiblePathPoint
GdipCreateRegionRect
GdipCreateRegionPath
GdipCreateRegionHrgn
GdipCreateRegionRgnData
GdipCloneRegion
GdipSetInfinite
GdipSetEmpty
GdipCombineRegionRect
GdipCombineRegionRegion
GdipCombineRegionPath
GdipTranslateRegion
GdipTransformRegion
GdipGetRegionBounds
GdipGetRegionDataSize
GdipGetRegionData
GdipGetRegionHRgn
GdipIsEmptyRegion
GdipIsInfiniteRegion
GdipIsEqualRegion
GdipIsVisibleRegionPoint
GdipIsVisibleRegionRect
GdipGetRegionScansCount
GdipGetRegionScans
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCloneMatrix
GdipSetMatrixElements
GdipGetMatrixElements
GdipMultiplyMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipInvertMatrix
GdipScaleMatrix
GdipShearMatrix
GdipTransformMatrixPoints
GdipVectorTransformMatrixPoints
GdipIsMatrixInvertible
GdipIsMatrixIdentity
GdipIsMatrixEqual
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCloneBitmapArea
GdipBitmapSetResolution
GdipCreateSolidFill
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetGenericFontFamilyMonospace
GdipGetFamilyName
GdipIsStyleAvailable
GdipGetEmHeight
GdipGetCellAscent
GdipGetCellDescent
GdipGetLineSpacing
GdipCreateHICONFromBitmap
GdipImageGetFrameCount
GdipGetImageThumbnail
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageBounds
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToStream
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipCloneImage
GdipLoadImageFromStream
GdipLoadImageFromFile
GdipEndContainer
GdipBeginContainer2
GdipBeginContainer
GdipRestoreGraphics
GdipSaveGraphics
GdipIsVisibleRect
GdipIsVisiblePoint
GdipIsVisibleClipEmpty
GdipIsClipEmpty
GdipGetVisibleClipBounds
GdipGetClipBounds
GdipGetClip
GdipTranslateClip
GdipResetClip
GdipSetClipHrgn
GdipSetClipRegion
GdipSetClipRect
GdipSetClipPath
GdipSetClipGraphics
GdipDrawImagePointsRect
GdipDrawImagePointRect
GdipDrawImagePoints
GdipDrawImageRect
GdipDrawImageRectRect
GdipDrawImage
GdipDrawDriverString
GdipMeasureCharacterRanges
GdipCreateRegion
GdipMeasureString
GdipDrawString
GdipFillRegion
GdipFillClosedCurve2
GdipFillClosedCurve
GdipFillPath
GdipFillPie
GdipFillEllipse
GdipFillPolygon
GdipGraphicsClear
GdipDrawClosedCurve2
GdipDrawClosedCurve
GdipDrawCurve2
GdipDrawCurve
GdipDrawPath
GdipDrawPolygon
GdipDrawPie
GdipDrawEllipse
GdipDrawRectangle
GdipDrawBezier
GdipDrawArc
GdipDrawLine
GdipGetNearestColor
GdipTransformPointsI
GdipTransformPoints
GdipGetDpiY
GdipGetDpiX
GdipGetPageScale
GdipSetPageScale
GdipGetPageUnit
GdipSetPageUnit
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipDeleteMatrix
GdipGetWorldTransform
GdipSetWorldTransform
GdipGetPixelOffsetMode
GdipSetPixelOffsetMode
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipReleaseDC
GdipGetDC
GdipFlush
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipSetImageAttributesColorMatrix
GdipGetImageAttributesAdjustedPalette
GdipSetImageAttributesWrapMode
GdipSetImageAttributesRemapTable
GdipSetImageAttributesOutputChannelColorProfile
GdipSetImageAttributesOutputChannel
GdipSetImageAttributesColorKeys
GdipSetImageAttributesGamma
GdipSetImageAttributesNoOp
GdipSetImageAttributesThreshold
GdipResetImageAttributes
GdipSetImageAttributesToIdentity
GdipCloneImageAttributes
GdipCreateImageAttributes
GdipDeleteRegion
GdipDeletePath
GdipDeleteFont
GdipImageSelectActiveFrame
GdipDisposeImage
GdipDeleteGraphics
GdipDeletePen
GdipSetSmoothingMode
GdipGetImageHeight
GdipGetImageWidth
GdipDrawRectangleI
GdipLoadImageFromStream
GdipLoadImageFromFile
GdipGetRegionBounds
GdipSetTextRenderingHint
GdipDeleteBrush
GdipCreateSolidFill
GdipSetSolidFillColor
GdiplusStartup
GdipDisposeImage
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipDisposeImageAttributes
GdipDeleteBrush
GdipFillRectangle
GdipCreateTexture
GdipGetPathFillMode
GdipAddPathBezier
ole32
StringFromGUID2
CoInitialize
CoUninitialize
CLSIDFromString
GetHGlobalFromStream
CLSIDFromString
CreateStreamOnHGlobal
CreateStreamOnHGlobal
shell32
ShellExecuteA
DragQueryFileA
CommandLineToArgvW
DragAcceptFiles
Shell_NotifyIconW
DragQueryFileW
DragFinish
ShellExecuteA
SHAppBarMessage
shlwapi
PathRemoveFileSpecW
PathFileExistsA
PathFindFileNameW
PathFileExistsA
comctl32
InitCommonControlsEx
ord17
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_EndDrag
msimg32
AlphaBlend
atl
ord42
imm32
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmAssociateContext
winmm
PlaySoundA
msvcrt
strchr
_except_handler3
tolower
__CxxFrameHandler
strncmp
memmove
modf
malloc
free
strrchr
atof
_CIpow
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
_CIfmod
srand
_ftol
atoi
rand
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9.0MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE