Static task
static1
Behavioral task
behavioral1
Sample
919ef928416bff60d703410987b618c2bd3d905155fe89e2016dba75b4ba9e44.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
919ef928416bff60d703410987b618c2bd3d905155fe89e2016dba75b4ba9e44.exe
Resource
win10v2004-20230915-en
General
-
Target
919ef928416bff60d703410987b618c2bd3d905155fe89e2016dba75b4ba9e44
-
Size
3.4MB
-
MD5
c21672040fc54e9327448aad57b59869
-
SHA1
457f1ccf0ede75d374793feffb6838e17df4fe2a
-
SHA256
919ef928416bff60d703410987b618c2bd3d905155fe89e2016dba75b4ba9e44
-
SHA512
bb3a6c250aca78bd1ca9ae95947a44acd087cf268b94f4fcb4e2cf0ff684184cba9e6017c254a6f97cb4af3a27dd263111bf5bc1afe07aa608c03b39d9e50b0c
-
SSDEEP
98304:lSHGlVHxZYcNsp7VdTGcxzKI2rtd4o+S+frMrnqGOEBaQX53kiQf63WfSVnIu01O:lSHKVHxZYcNsp7VdTGcx+I2rIIuInqGx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 919ef928416bff60d703410987b618c2bd3d905155fe89e2016dba75b4ba9e44
Files
-
919ef928416bff60d703410987b618c2bd3d905155fe89e2016dba75b4ba9e44.exe windows:6 windows x86
33ae019db3b7e3f82211a89c95438ff6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStdHandle
ExitProcess
QueryPerformanceFrequency
VirtualQuery
GetSystemInfo
GetConsoleMode
GetStringTypeW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFileType
SetStdHandle
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
GetConsoleOutputCP
ReadConsoleW
SetFilePointerEx
HeapQueryInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
CreateFileW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
GetTimeZoneInformation
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
LocalUnlock
LocalLock
Sleep
SearchPathA
GetTempPathA
GetProfileIntA
VerifyVersionInfoA
VerSetConditionMask
GetTickCount
GetWindowsDirectoryA
SetErrorMode
FindResourceExW
lstrcpyA
GetCurrentDirectoryA
GetACP
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
GetStringTypeExA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
GetVolumeInformationA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetAtomNameA
CopyFileA
FormatMessageA
LocalFree
GlobalSize
InitializeCriticalSection
GlobalFlags
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
MulDiv
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileA
GetTempFileNameA
SetFileTime
GetFullPathNameA
GetFileTime
GetFileAttributesA
GetDiskFreeSpaceA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GlobalAlloc
GetModuleFileNameA
GetVersionExA
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
GlobalFree
GlobalLock
GlobalUnlock
GetCurrentProcessId
CompareStringA
WideCharToMultiByte
MultiByteToWideChar
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
FindResourceW
SizeofResource
LockResource
LoadResource
LoadLibraryExW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
DeleteCriticalSection
InitializeCriticalSectionEx
HeapSize
HeapReAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
GetThreadLocale
IsBadReadPtr
lstrlenA
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
HeapFree
SetLastError
HeapAlloc
GetCommandLineW
WriteConsoleW
user32
InflateRect
GetMenuItemInfoA
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
RemoveMenu
InsertMenuA
GetMenuState
GetMenuStringA
GetSysColorBrush
RealChildWindowFromPoint
ClientToScreen
DestroyCursor
LoadCursorW
LoadCursorA
FillRect
SetRect
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageA
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
ReleaseDC
GetDC
GetSystemMetrics
IsZoomed
SystemParametersInfoA
SetParent
IsRectEmpty
DeleteMenu
AppendMenuA
GetSystemMenu
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
LoadImageA
DestroyIcon
GetWindowThreadProcessId
GetDesktopWindow
OffsetRect
IntersectRect
SetRectEmpty
SetCursor
InvalidateRect
InsertMenuItemA
DestroyMenu
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
GetActiveWindow
BringWindowToTop
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
CopyImage
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
GetDCEx
LockWindowUpdate
CharUpperA
RegisterClipboardFormatA
EnableWindow
UpdateWindow
UnregisterClassA
SendMessageA
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetDialogBaseUnits
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
LoadAcceleratorsW
LoadMenuW
DrawIcon
SetWindowRgn
GetTabbedTextExtentW
InSendMessage
WindowFromDC
PostThreadMessageA
GetAsyncKeyState
GetKeyNameTextA
MapVirtualKeyA
UnionRect
SetTimer
KillTimer
WindowFromPoint
SetDlgItemInt
SetCapture
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
GetParent
LoadBitmapW
RegisterWindowMessageA
DispatchMessageA
PeekMessageA
GetMessagePos
GetMessageTime
PostMessageA
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
GetMenuDefaultItem
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
IsIconic
GetDlgItem
GetDlgCtrlID
SetFocus
GetKeyState
GetCapture
WaitMessage
IsClipboardFormatAvailable
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
SetClassLongA
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
SendNotifyMessageA
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
CharUpperBuffA
GetUpdateRect
EnumChildWindows
SubtractRect
MonitorFromRect
GetWindowRgn
GetTabbedTextExtentA
LoadImageW
TrackMouseEvent
CreateMenu
gdi32
StartDocA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
DPtoLP
CreatePen
GetStockObject
GetViewportOrgEx
PatBlt
Rectangle
CopyMetaFileA
BitBlt
CreateDIBPatternBrushPt
CreateHatchBrush
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
Escape
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
GetDeviceCaps
ExtTextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateRectRgnIndirect
GetMapMode
SetRectRgn
GetBkColor
GetTextColor
GetRgnBox
CreateEllipticRgn
Ellipse
CreateDIBSection
LPtoDP
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
GetTextFaceA
EnumFontFamiliesExA
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
CreateDCA
CreateFontIndirectA
StretchDIBits
GetCharWidthA
DeleteObject
DeleteDC
CreateFontA
GetTextMetricsA
SelectObject
GetTextExtentPoint32A
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
SetBkColor
TextOutA
SetTextColor
CreateBitmap
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
GetJobA
OpenPrinterA
DocumentPropertiesA
advapi32
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExW
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
SHGetMalloc
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
SHAddToRecentDocs
SHGetFileInfoA
DragFinish
DragQueryFileA
SHGetSpecialFolderPathA
ShellExecuteExA
ExtractIconA
SHAppBarMessage
shlwapi
PathStripToRootA
PathIsUNCA
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW
StrFormatKBSizeA
uxtheme
GetCurrentThemeName
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
DrawThemeText
GetThemeSysColor
OpenThemeData
CloseThemeData
GetThemeColor
GetThemePartSize
IsAppThemed
GetWindowTheme
ole32
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRun
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleGetClipboard
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
WriteClassStm
CreateDataAdviseHolder
IsAccelerator
CreateItemMoniker
OleSetMenuDescriptor
OleSaveToStream
CreateOleAdviseHolder
CoLockObjectExternal
GetRunningObjectTable
OleIsRunning
CoGetMalloc
GetHGlobalFromILockBytes
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
CreateGenericComposite
OleRegEnumVerbs
OleRegGetMiscStatus
CoInitializeEx
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
OleLoad
OleSave
CoDisconnectObject
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
StringFromCLSID
CoTaskMemFree
PropVariantCopy
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
OleSetContainedObject
OleLockRunning
OleGetIconOfClass
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
RevokeDragDrop
RegisterDragDrop
OleQueryCreateFromData
OleQueryLinkFromData
DoDragDrop
StringFromGUID2
CoTaskMemAlloc
oleaut32
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
VarDecFromStr
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
SysReAllocStringLen
VarBstrFromDec
LoadRegTypeLi
LoadTypeLi
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
OleCreateFontIndirect
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SafeArrayDestroyData
RegisterTypeLi
oledlg
ord8
gdiplus
GdipCreateFromHDC
GdipDrawImageRectI
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipGetImagePaletteSize
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 518KB - Virtual size: 518KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ