Static task
static1
Behavioral task
behavioral1
Sample
4130960fe276b32dc2b913c1699eb6804a0b5556f986a1936800403f076fac45.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4130960fe276b32dc2b913c1699eb6804a0b5556f986a1936800403f076fac45.exe
Resource
win10v2004-20230915-en
General
-
Target
4130960fe276b32dc2b913c1699eb6804a0b5556f986a1936800403f076fac45
-
Size
2.1MB
-
MD5
eda6e77fa33e96981148fdf2445c2e68
-
SHA1
931c9095c1a9d617f22be7f82e4f3a5ec9a8cf6e
-
SHA256
4130960fe276b32dc2b913c1699eb6804a0b5556f986a1936800403f076fac45
-
SHA512
73cedd65d39fcdd844673a962b9c009b3173c5481bac5389f2f5f076a6e06f095853d4dfc205a9ba2af27de2639c9b946742ea19101a5831706b5ffabaea8ac7
-
SSDEEP
24576:bYCTsrp8hoWuH503Si4GOZuiaVP2u62VqgS5srshAW:V6p8vKxafUb5eUAW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4130960fe276b32dc2b913c1699eb6804a0b5556f986a1936800403f076fac45
Files
-
4130960fe276b32dc2b913c1699eb6804a0b5556f986a1936800403f076fac45.exe windows:5 windows x86
4a4933d33f349f3e3689e8e6fcdbb40e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectW
TextOutW
GetTextFaceW
CreatePen
GetTextMetricsW
LineTo
MoveToEx
GetDIBits
GetTextExtentPointW
SetTextColor
SetPixelV
SetBkMode
SetBkColor
SelectObject
Rectangle
PtInRegion
OffsetRgn
GetStockObject
GetDeviceCaps
CreateDIBSection
BitBlt
EnumFontFamiliesW
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreateFontIndirectW
CreateDIBPatternBrushPt
CreateCompatibleDC
CreateCompatibleBitmap
CombineRgn
GetTextExtentPoint32W
comctl32
ImageList_LoadImageW
ImageList_Create
ImageList_Destroy
CreateStatusWindowW
InitCommonControlsEx
ImageList_ReplaceIcon
msimg32
AlphaBlend
winmm
PlaySoundW
gdiplus
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdiplusStartup
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipImageGetFrameCount
GdipFree
GdipAlloc
GdipDrawImageRectI
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipGetImagePixelFormat
GdipBitmapGetPixel
GdipGetImageEncoders
msvfw32
MCIWndCreateW
wininet
DeleteUrlCacheEntryW
oledlg
OleUIAddVerbMenuW
OleUIInsertObjectW
advapi32
IsTextUnicode
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
shlwapi
PathFileExistsW
PathAppendW
PathFindExtensionW
PathFindFileNameW
PathIsDirectoryW
PathRemoveFileSpecW
StrCmpNIW
PathAddExtensionW
SHStrDupW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
urlmon
URLDownloadToFileW
kernel32
GetConsoleCP
GetFileType
GetUserDefaultLCID
IsValidLocale
LCMapStringW
HeapReAlloc
HeapSize
GetStringTypeW
GetACP
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
VirtualFree
VerSetConditionMask
InterlockedIncrement
InterlockedDecrement
FreeResource
LockResource
FreeLibrary
GetProcAddress
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
GetShortPathNameW
GetCurrentProcess
GetExitCodeProcess
RaiseException
CreateThread
GetCurrentThreadId
GetLastError
SetLastError
DebugBreak
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
Sleep
LoadResource
SizeofResource
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
FindClose
CloseHandle
DuplicateHandle
MulDiv
GetTickCount
CreatePipe
PeekNamedPipe
lstrcmpA
lstrcmpW
lstrcmpiW
lstrcpynW
lstrlenA
lstrlenW
LoadLibraryW
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
CreateProcessW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
FindResourceW
FindResourceExW
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
GetTempPathW
GetTempFileNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
RemoveDirectoryW
GetFullPathNameW
CreateFileW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
CopyFileW
MoveFileExW
IsBadReadPtr
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetThreadLocale
SetThreadLocale
GetUserDefaultLangID
EnumSystemLocalesW
GlobalSize
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
SetPriorityClass
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
EncodePointer
OutputDebugStringW
IsDebuggerPresent
SetStdHandle
WriteConsoleW
GetConsoleMode
DecodePointer
SetEndOfFile
user32
SetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
CharUpperW
CharLowerW
CharNextW
SetFocus
GetFocus
GetKeyState
GetAsyncKeyState
SetCapture
ReleaseCapture
SetTimer
KillTimer
EnableWindow
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetSystemMetrics
LoadMenuW
LoadMenuIndirectW
GetMenu
SetMenu
GetSystemMenu
CreatePopupMenu
DestroyMenu
CheckMenuItem
EnableMenuItem
GetSubMenu
GetMenuItemCount
InsertMenuW
RemoveMenu
DeleteMenu
TrackPopupMenu
TrackPopupMenuEx
DrawTextW
UpdateWindow
SetForegroundWindow
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
SetWindowRgn
GetWindowRgn
InvalidateRect
InvalidateRgn
RedrawWindow
GetScrollPos
ShowScrollBar
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetClientRect
GetWindowRect
AdjustWindowRectEx
MessageBoxW
SetCursor
CloseClipboard
ClientToScreen
CreateDialogIndirectParamW
MapWindowPoints
GetSysColor
GetSysColorBrush
DrawFocusRect
FillRect
SetRect
CopyRect
InflateRect
OffsetRect
EqualRect
PtInRect
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetParent
EnumChildWindows
FindWindowW
FindWindowExW
GetClassNameW
GetTopWindow
GetWindow
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
CheckMenuRadioItem
LoadBitmapW
LoadCursorW
LoadCursorFromFileW
DestroyCursor
LoadIconW
DestroyIcon
LoadImageW
DrawIconEx
GetIconInfo
LoadStringW
IsDialogMessageW
MapDialogRect
SetScrollInfo
GetGuiResources
SystemParametersInfoW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
GetComboBoxInfo
IsWindowEnabled
SetPropW
GetPropW
RemovePropW
EnumPropsW
CreateIconFromResourceEx
GetClipboardData
RegisterClipboardFormatW
CreateIconFromResource
SetRectEmpty
CreateDialogParamW
OpenClipboard
GetDialogBaseUnits
GetDlgCtrlID
SendDlgItemMessageW
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CreateWindowExW
IsZoomed
BringWindowToTop
IsIconic
GetDlgItemTextW
SetDlgItemTextW
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
GetDlgItem
EndDialog
DialogBoxIndirectParamW
GetCursorPos
DialogBoxParamW
IsWindowVisible
RegisterWindowMessageW
DrawFrameControl
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
MoveWindow
ShowWindowAsync
ShowWindow
DestroyWindow
IsChild
ScreenToClient
IsWindow
GetClassInfoExW
RegisterClassExW
UnregisterClassW
CallWindowProcW
PostQuitMessage
DefWindowProcW
PostMessageW
SendMessageW
CheckDlgButton
shell32
DragQueryFileW
DragAcceptFiles
ShellExecuteW
ExtractIconW
SHGetPathFromIDListW
SHBrowseForFolderW
DragFinish
ole32
CoCreateInstance
StringFromCLSID
OleIsRunning
OleDraw
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
OleInitialize
OleUninitialize
OleLockRunning
CreateStreamOnHGlobal
OleSave
OleCreate
WriteClassStg
CoGetClassObject
StgCreateDocfile
oleaut32
SysStringLen
VariantClear
SysAllocStringLen
SysAllocString
LoadRegTypeLi
LoadTypeLi
VariantInit
VarUI4FromStr
SysFreeString
OleCreateFontIndirect
comdlg32
ChooseFontW
GetFileTitleW
GetSaveFileNameW
GetOpenFileNameW
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 914KB - Virtual size: 914KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ