Static task
static1
Behavioral task
behavioral1
Sample
d771660090941c0c00fb0d5b891c77b6e7c38ce4c7c7818fed96da7096988d43.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d771660090941c0c00fb0d5b891c77b6e7c38ce4c7c7818fed96da7096988d43.exe
Resource
win10v2004-20230915-en
General
-
Target
d771660090941c0c00fb0d5b891c77b6e7c38ce4c7c7818fed96da7096988d43
-
Size
4.6MB
-
MD5
1a78571e045ba2daf7a01a8224957e18
-
SHA1
699f9d05d35ac2fdb8e76a7eefbafc67b35375f9
-
SHA256
d771660090941c0c00fb0d5b891c77b6e7c38ce4c7c7818fed96da7096988d43
-
SHA512
70506c8b3ef1c70926407a8b6ea2f51c4c2380e30d1c0ee664b36788ca4325b35f78ce1ecf9084e0b644639da62557f9c8fbbdd0eee3455d6638385b208ac7e3
-
SSDEEP
98304:RG4FT8H/8ctroVnIU3wVNwHNo6xpPQrv/mchnsblk6HzSd0jg4xLu4:Qw9ctCwVNwchnsblkYzY4xb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d771660090941c0c00fb0d5b891c77b6e7c38ce4c7c7818fed96da7096988d43
Files
-
d771660090941c0c00fb0d5b891c77b6e7c38ce4c7c7818fed96da7096988d43.exe windows:6 windows x86
d1f34b8763e4f16f19be25807a67d76f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStdHandle
GetFileType
SetStdHandle
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
EnumSystemLocalesW
ExitThread
HeapQueryInformation
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
IsValidLocale
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation
GetConsoleOutputCP
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
CreateFileW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
GetStringTypeW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalUnlock
LocalLock
GetWindowsDirectoryA
SetErrorMode
SystemTimeToTzSpecificLocalTime
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
FindResourceExW
GetACP
GetCurrentDirectoryA
SearchPathA
GetProfileIntA
GetTickCount
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
GetStringTypeExA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
GetVolumeInformationA
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
GetFileSize
GetFileAttributesA
GetCPInfo
GetOEMCP
VirtualProtect
GetVersionExA
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
SetEvent
GlobalFlags
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
GetAtomNameA
lstrcmpA
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetTempPathA
SetFilePointer
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetModuleFileNameA
GetCurrentProcessId
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
SetLastError
GetLastError
RaiseException
DecodePointer
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
VerifyVersionInfoA
lstrcpyA
FindResourceW
SizeofResource
LockResource
LoadResource
FreeLibrary
VerSetConditionMask
CreateThread
CreateMutexA
WaitForSingleObject
ReleaseMutex
Sleep
ExitProcess
CloseHandle
WriteFile
SetFileAttributesA
InitializeCriticalSectionEx
CreateFileA
CreateDirectoryA
FreeLibraryAndExitThread
WriteConsoleW
user32
SetWindowTextA
ScrollWindowEx
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
SetClassLongA
LockWindowUpdate
CreatePopupMenu
BringWindowToTop
ShowWindow
SetParent
SetRect
SetCursorPos
NotifyWinEvent
IntersectRect
WindowFromPoint
GetCursorPos
SetCursor
MessageBeep
DeleteMenu
EnableMenuItem
CheckMenuItem
GetSystemMenu
LoadMenuW
KillTimer
SetTimer
ReleaseCapture
SetCapture
IsZoomed
TrackMouseEvent
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
MapVirtualKeyA
ToAsciiEx
GetKeyboardState
GetAsyncKeyState
CharUpperA
GetKeyboardLayout
DrawIconEx
IsRectEmpty
OffsetRect
InflateRect
DrawFocusRect
SetWindowRgn
DrawStateA
DrawFrameControl
DrawEdge
GetWindowThreadProcessId
IsWindowEnabled
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
MessageBoxA
AdjustWindowRectEx
IsDialogMessageA
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
EnableWindow
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CopyImage
GetActiveWindow
CreateDialogIndirectParamA
SetMenuDefaultItem
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassA
CallWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
RegisterWindowMessageA
ScreenToClient
ClientToScreen
ReleaseDC
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
EndDialog
GetNextDlgTabItem
MapDialogRect
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DestroyIcon
LoadImageA
LoadImageW
MonitorFromPoint
UnionRect
EnableScrollBar
GetDesktopWindow
RealChildWindowFromPoint
DestroyMenu
GetMenuItemInfoA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
GetWindowRect
LoadBitmapW
PostQuitMessage
RegisterClassExA
BeginPaint
EndPaint
InvalidateRect
LoadCursorA
LoadIconA
PostMessageA
GetDC
GetClientRect
FillRect
SendMessageA
GetClassInfoA
SetLayeredWindowAttributes
GetSystemMetrics
MapWindowPoints
GetSysColor
GetSysColorBrush
SetRectEmpty
GetMenuDefaultItem
CopyRect
GetParent
LoadCursorW
SystemParametersInfoA
GetMonitorInfoA
EnumDisplayMonitors
UnregisterClassA
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
UnhookWindowsHookEx
DrawTextA
ModifyMenuA
IsCharLowerA
GetKeyNameTextA
MapVirtualKeyExA
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatA
CharUpperBuffA
UpdateLayeredWindow
FrameRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
WaitMessage
SendNotifyMessageA
MonitorFromRect
InSendMessage
PostThreadMessageA
CreateMenu
WindowFromDC
ShowOwnedPopups
GetDialogBaseUnits
GetNextDlgGroupItem
GetComboBoxInfo
DestroyCursor
EnumChildWindows
GetWindowRgn
DrawIcon
HideCaret
InvertRect
GetTabbedTextExtentA
GetDCEx
GetTabbedTextExtentW
CopyIcon
GetIconInfo
GetDoubleClickTime
gdi32
GetTextMetricsA
GetObjectA
CopyMetaFileA
CreateDCA
CreateBitmap
CreateDIBPatternBrushPt
CreateHatchBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
TextOutA
ExtTextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
GetTextCharsetInfo
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
GetTextExtentPoint32A
PatBlt
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
CreateDIBSection
GetCurrentObject
GetMapMode
SetRectRgn
DPtoLP
GetDIBits
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExA
CreateFontA
GetCharWidthA
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
SetPixelV
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
GetStockObject
GetDeviceCaps
EnumFontFamiliesA
CreateRectRgnIndirect
CreatePatternBrush
CreatePen
CreateFontIndirectA
CreateDIBitmap
SelectObject
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleBitmap
StretchDIBits
OffsetViewportOrgEx
CreateCompatibleDC
BitBlt
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesA
GetJobA
OpenPrinterA
advapi32
RegEnumValueA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyExW
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueA
RegCloseKey
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHAddToRecentDocs
ExtractIconA
SHBrowseForFolderA
DragFinish
DragQueryFileA
SHAppBarMessage
ShellExecuteA
ShellExecuteExA
SHGetFileInfoA
SHGetDesktopFolder
shlwapi
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
StrFormatKBSizeA
PathRemoveFileSpecW
uxtheme
GetThemePartSize
DrawThemeParentBackground
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
IsAppThemed
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
ole32
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CreateILockBytesOnHGlobal
WriteClassStm
CoFreeUnusedLibraries
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
StgCreateDocfileOnILockBytes
OleLockRunning
OleSetMenuDescriptor
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
PropVariantCopy
CreateStreamOnHGlobal
OleSetContainedObject
OleGetIconOfClass
OleRun
CreateDataAdviseHolder
CoCreateGuid
CoUninitialize
CLSIDFromString
CoDisconnectObject
StringFromGUID2
CoInitialize
CoCreateInstance
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CreateOleAdviseHolder
GetRunningObjectTable
OleIsRunning
CoGetMalloc
CoInitializeEx
OleQueryLinkFromData
OleQueryCreateFromData
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
OleUninitialize
OleInitialize
CreateFileMoniker
CreateBindCtx
oleaut32
VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SysAllocString
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
VarDecFromStr
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
SafeArrayGetDim
SafeArrayAllocData
gdiplus
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipGetImageWidth
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
oledlg
ord8
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 514KB - Virtual size: 514KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ