Static task
static1
Behavioral task
behavioral1
Sample
50915b0a1c11de2a531a87a24fc8bf1de165df72b00f7aa89ea409b21b23f478.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
50915b0a1c11de2a531a87a24fc8bf1de165df72b00f7aa89ea409b21b23f478.exe
Resource
win10v2004-20230915-en
General
-
Target
50915b0a1c11de2a531a87a24fc8bf1de165df72b00f7aa89ea409b21b23f478
-
Size
2.2MB
-
MD5
49aa6b72aafc44f69bdb99c86c7097d9
-
SHA1
30d325af55dfc3729ce6e59a187b32d12c5bbc43
-
SHA256
50915b0a1c11de2a531a87a24fc8bf1de165df72b00f7aa89ea409b21b23f478
-
SHA512
6097d132f485b4c53a15040134591741c6fdc9af2c6ce53f4dbe6ddd6dbfc0b59421bc0ac9892ea43440a0fb777049c67806cf54120eaf90ff535025c6199703
-
SSDEEP
49152:dq2eBB0wBNF6wavSZGCSX92ir1Ed3Yun1Ulc26EAAwgQA58sQm:dq2en0wBNF6wa60F92ir1IXnWlc2aAwg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50915b0a1c11de2a531a87a24fc8bf1de165df72b00f7aa89ea409b21b23f478
Files
-
50915b0a1c11de2a531a87a24fc8bf1de165df72b00f7aa89ea409b21b23f478.exe windows:4 windows x86
f3e0377ae54d4fc3141d4a304e17d716
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
LCMapStringW
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
GetProfileStringA
InterlockedExchange
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetACP
HeapSize
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapReAlloc
HeapAlloc
HeapFree
RaiseException
RtlUnwind
FileTimeToLocalFileTime
GetFileSize
GetShortPathNameA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentProcess
DuplicateHandle
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetLastError
GetDiskFreeSpaceA
GetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleFileNameA
GlobalAlloc
GetCurrentThread
lstrcmpA
lstrcpynA
MulDiv
SetLastError
FormatMessageA
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileInformationByHandle
GetLocalTime
FileTimeToSystemTime
WriteFile
SetFileTime
CreateDirectoryA
LocalFileTimeToFileTime
CloseHandle
CreateFileA
SystemTimeToFileTime
CopyFileA
MultiByteToWideChar
GetTickCount
Sleep
lstrlenA
GetThreadLocale
IsBadReadPtr
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
RemoveDirectoryA
IsValidLocale
user32
PostThreadMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
ReleaseDC
GetDC
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
LoadIconA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetKeyState
CopyAcceleratorTableA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetDesktopWindow
wsprintfA
LoadCursorA
AppendMenuA
CreatePopupMenu
UpdateWindow
EnableWindow
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
GetWindowRect
InvalidateRect
CharNextA
GetMenuStringA
InsertMenuA
LockWindowUpdate
GetDCEx
IsWindowVisible
GetWindowLongA
WindowFromPoint
GetParent
SetCapture
GetCapture
GetActiveWindow
RedrawWindow
ClientToScreen
GetClientRect
DrawFocusRect
DrawStateA
FrameRect
FillRect
OffsetRect
RegisterClipboardFormatA
GetTabbedTextExtentA
CharUpperA
MessageBeep
GetDlgCtrlID
GetNextDlgGroupItem
InflateRect
CopyRect
SetCursor
GetSysColor
ReleaseCapture
GetIconInfo
LoadImageA
DestroyIcon
DestroyCursor
SendMessageA
InvertRect
KillTimer
SetTimer
GetSysColorBrush
GetClassNameA
FindWindowA
SetRect
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
GetSystemMenu
DeleteMenu
IsRectEmpty
SetParent
IsZoomed
PtInRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
LoadStringA
CreateWindowExA
GetCursorPos
GetWindowDC
gdi32
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetBkMode
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
DPtoLP
StretchDIBits
GetCharWidthA
CreateFontA
GetTextMetricsA
CreateDCA
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
LPtoDP
GetTextColor
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
RestoreDC
SaveDC
StartDocA
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32A
GetDeviceCaps
RoundRect
Ellipse
Arc
CreateFontIndirectA
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
Rectangle
CreatePen
CreateDIBitmap
GetTextExtentPointA
GetStockObject
comdlg32
GetFileTitleA
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
ChooseColorA
CommDlgExtendedError
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
GetFileSecurityA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegQueryValueA
SetFileSecurityA
RegDeleteValueA
shell32
ExtractIconA
DragQueryFileA
DragFinish
SHGetFileInfoA
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
olepro32
ord253
oleaut32
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ