Static task
static1
Behavioral task
behavioral1
Sample
37618fc0a04e6d78040b723bb12f9fedcca6051d23780212b2e11f81198c0e4a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
37618fc0a04e6d78040b723bb12f9fedcca6051d23780212b2e11f81198c0e4a.exe
Resource
win10v2004-20230915-en
General
-
Target
37618fc0a04e6d78040b723bb12f9fedcca6051d23780212b2e11f81198c0e4a
-
Size
400KB
-
MD5
0d253ccb20556d0b5d86fe86c3bf06e0
-
SHA1
872ee35c9261a73cefae5f9a4b3e2492f57f8876
-
SHA256
37618fc0a04e6d78040b723bb12f9fedcca6051d23780212b2e11f81198c0e4a
-
SHA512
146f0cbede3bd7d61b689f94ad3ce1cb7c21973fc4f6139fcf56f8059b5bdb7d86a663f447ac12088eb15b74e690c9ff3d232c086840daadb8e680f2355fbc29
-
SSDEEP
6144:/7bC2SLVC2tYrc2IuSxgIZEg2Wo3DEvK2cyJ7e:/7bC2SLo2tyc2IuSSIZEzDEvKwq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37618fc0a04e6d78040b723bb12f9fedcca6051d23780212b2e11f81198c0e4a
Files
-
37618fc0a04e6d78040b723bb12f9fedcca6051d23780212b2e11f81198c0e4a.exe windows x86
f73baf3413b81befbb4f12390e146fd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
SetHandleCount
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetEnvironmentStringsW
GetProfileStringA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetACP
HeapReAlloc
HeapSize
TerminateProcess
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitThread
CreateThread
RaiseException
RtlUnwind
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
DuplicateHandle
GetThreadLocale
WritePrivateProfileStringA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FormatMessageA
LocalFree
WideCharToMultiByte
InterlockedIncrement
MultiByteToWideChar
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
GetModuleFileNameA
GlobalAlloc
GlobalFree
InterlockedDecrement
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcpyA
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
lstrlenA
lstrcmpA
GlobalLock
GlobalUnlock
MulDiv
SetLastError
GetCurrentThread
GetLastError
GetCurrentProcess
CreateEventA
WaitForSingleObject
SetEvent
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
Process32Next
GetLocalTime
GetSystemInfo
Sleep
ExitProcess
CreateFileA
GetProcAddress
WriteFile
CloseHandle
GetModuleHandleA
IsBadCodePtr
user32
SetParent
PtInRect
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
IntersectRect
SystemParametersInfoA
GetWindowPlacement
IsZoomed
GetSystemMetrics
GetLastActivePopup
BringWindowToTop
IsIconic
GetFocus
EqualRect
CopyRect
GetDlgItem
InvalidateRect
SetWindowLongA
wsprintfA
GetKeyState
SetWindowPos
GetDlgCtrlID
UpdateWindow
GetMenuItemCount
GetSubMenu
GetMenuItemID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
GetMenu
LoadIconA
GetClassInfoA
LoadMenuA
DestroyMenu
SetFocus
GetParent
GetActiveWindow
ShowWindow
GetWindowLongA
IsWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
SendMessageA
SetCursor
PostMessageA
ReleaseDC
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetDC
GetNextDlgGroupItem
CopyAcceleratorTableA
GetCapture
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GetClientRect
EnableWindow
PeekMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
RegisterClipboardFormatA
GetTabbedTextExtentA
MessageBeep
CharUpperA
GetWindowRect
OffsetRect
CharNextA
LockWindowUpdate
GetDCEx
InvertRect
SetCapture
InflateRect
WindowFromPoint
KillTimer
SetTimer
LoadStringA
GetSysColorBrush
GetClassNameA
FindWindowA
FillRect
SetRect
LoadCursorA
DestroyCursor
MapDialogRect
SetWindowContextHelpId
GetMessageA
ValidateRect
GetCursorPos
ShowOwnedPopups
PostQuitMessage
EndDialog
CreateDialogIndirectParamA
GetSystemMenu
DeleteMenu
AppendMenuA
IsWindowVisible
IsRectEmpty
GetMenuState
gdi32
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
DeleteObject
CreateRectRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
OffsetViewportOrgEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32A
GetTextMetricsA
GetObjectA
CreateBitmap
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
PatBlt
Rectangle
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
LPtoDP
CreateFontIndirectA
BitBlt
GetTextColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetTextFaceA
GetWindowOrgEx
GetMapMode
SetRectRgn
CombineRgn
CreateRectRgnIndirect
SetViewportOrgEx
SetMapMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
DPtoLP
GetBkColor
GetROP2
CreatePen
CreateDIBitmap
GetTextExtentPointA
Arc
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegSetValueExA
AdjustTokenPrivileges
RegQueryValueExA
RegCloseKey
GetFileSecurityA
SetFileSecurityA
RegOpenKeyExA
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueA
shell32
DragQueryFileA
DragFinish
ShellExecuteA
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
olepro32
ord253
oleaut32
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
Sections
.text Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ