Static task
static1
Behavioral task
behavioral1
Sample
0bae7b2e3c5f46a04c7be93080fd2a79ff2eb73d942a91f3156e2f103fd70e8f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0bae7b2e3c5f46a04c7be93080fd2a79ff2eb73d942a91f3156e2f103fd70e8f.exe
Resource
win10v2004-20230915-en
General
-
Target
0bae7b2e3c5f46a04c7be93080fd2a79ff2eb73d942a91f3156e2f103fd70e8f
-
Size
632KB
-
MD5
0ed08c3a13f37c897d57cfcd1a03f0c0
-
SHA1
620e32d2f2dafaa9c3d32104d7a674f9f53ad882
-
SHA256
0bae7b2e3c5f46a04c7be93080fd2a79ff2eb73d942a91f3156e2f103fd70e8f
-
SHA512
388805a373e02c09ff3974cb732b821bd8304645bbaec0d95fd245a95c353f8810e31a3cc517593d9ffd7c6ade0c4da8a74ad9fefd8cefe38d6d44e6777017a7
-
SSDEEP
12288:waxDS86dAwEs0Au2OjABEL+pc/XIjfMkUVmhW5eQq7SrRTdmXR:wax286LEsW0TUVmhWqkTd2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bae7b2e3c5f46a04c7be93080fd2a79ff2eb73d942a91f3156e2f103fd70e8f
Files
-
0bae7b2e3c5f46a04c7be93080fd2a79ff2eb73d942a91f3156e2f103fd70e8f.exe windows:5 windows x86
66101f20f712d06a4da2a57ed68d5ade
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeSetEvent
timeKillEvent
timeGetTime
comctl32
ord17
_TrackMouseEvent
gdiplus
GdipScaleMatrix
GdipMeasureString
GdipFillPath
GdipFillEllipseI
GdipDrawEllipseI
GdipDrawString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawPath
GdipDrawRectangleI
GdipDrawBezierI
GdipDrawLineI
GdipFillRectangle
GdipDeletePath
GdipTransformPath
GdipIsOutlineVisiblePathPointI
GdipIsVisiblePathPointI
GdipGetPathWorldBoundsI
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromFile
GdipAddPathPolygonI
GdipAddPathPieI
GdipAddPathArcI
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathCurveI
GdipAddPathBezierI
GdipAddPathLine2I
GdipAddPathLineI
GdipClosePathFigure
GdipStartPathFigure
GdipGetPathFillMode
GdipSetPathFillMode
GdipResetPath
GdipClonePath
GdipCreatePath
GdipCreateTexture
GdipCreateBitmapFromHBITMAP
GdipCreateSolidFill
GdipGetPenDashStyle
GdipSetPenDashStyle
GdipGetPenLineJoin
GdipSetPenLineJoin
GdipGetPenDashCap197819
GdipGetPenEndCap
GdipGetPenStartCap
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipSetPenColor
GdipGetPenWidth
GdipSetPenWidth
GdipClonePen
GdipLoadImageFromFile
GdipImageRotateFlip
GdipDrawImageRect
GdipSetWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipCreatePen2
GdipSetLineBlend
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushFromRect
GdipDrawArc
GdipDeletePen
GdipCreatePen1
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeleteMatrix
GdipCreateMatrix
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCreateHBITMAPFromBitmap
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
shlwapi
PathIsRelativeW
PathFileExistsW
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
msimg32
AlphaBlend
kernel32
ReadFile
GetConsoleMode
GetConsoleCP
OutputDebugStringW
LCMapStringW
GetStringTypeW
GetCPInfo
GetOEMCP
GetFileSize
GetACP
IsValidCodePage
TerminateProcess
GetCurrentProcess
SetFilePointerEx
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameW
GetStartupInfoW
GetFileType
GetStdHandle
GetProcessHeap
SetLastError
HeapSize
GetModuleHandleExW
ExitProcess
IsProcessorFeaturePresent
IsDebuggerPresent
HeapReAlloc
HeapFree
HeapAlloc
LoadLibraryExW
GetCommandLineW
RtlUnwind
DecodePointer
EncodePointer
ReadConsoleW
SetStdHandle
FlushFileBuffers
WriteConsoleW
CreateFileW
MultiByteToWideChar
Sleep
SetEndOfFile
LoadLibraryW
VirtualQuery
SetFilePointer
WideCharToMultiByte
WriteFile
GetEnvironmentVariableW
GetFileAttributesW
GlobalSize
MulDiv
SetUnhandledExceptionFilter
GetCurrentProcessId
InterlockedCompareExchange
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
WaitForSingleObject
SetEvent
CreateEventW
CloseHandle
TerminateThread
RaiseException
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetQueuedCompletionStatus
InterlockedExchange
GetLastError
PostQueuedCompletionStatus
CreateIoCompletionPort
GetModuleHandleW
SystemTimeToFileTime
QueryPerformanceCounter
GetSystemTimeAsFileTime
QueryPerformanceFrequency
LocalFileTimeToFileTime
VerifyVersionInfoW
VerSetConditionMask
GetTickCount
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetProcAddress
GetModuleHandleA
user32
FindWindowW
GetDesktopWindow
GetParent
PostQuitMessage
SetClipboardData
DispatchMessageW
DefWindowProcW
CreateWindowExW
MsgWaitForMultipleObjectsEx
PeekMessageW
CallMsgFilterW
RegisterClassExW
TranslateMessage
GetQueueStatus
WaitMessage
KillTimer
PostMessageW
UnregisterClassW
SetTimer
DestroyWindow
ReleaseDC
LoadCursorW
RegisterClassW
GetClassInfoExW
SetWindowLongW
IsWindow
GetWindowLongW
GetWindow
EnableWindow
SetFocus
ShowWindow
GetWindowRect
GetMonitorInfoW
MonitorFromWindow
IsIconic
SetWindowPos
GetSystemMetrics
SendMessageW
CallWindowProcW
SetPropW
GetPropW
GetDC
SetWindowTextW
InvalidateRect
ScreenToClient
GetKeyState
GetCursorPos
GetFocus
SetCapture
ReleaseCapture
BeginPaint
EndPaint
MoveWindow
GetUpdateRect
GetClientRect
IsRectEmpty
IntersectRect
UpdateLayeredWindow
PtInRect
IsZoomed
MonitorFromPoint
OffsetRect
SetWindowRgn
MessageBoxW
IsWindowVisible
SetForegroundWindow
UnionRect
SetCursor
CharNextW
ClientToScreen
GetSysColor
GetAsyncKeyState
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
EmptyClipboard
MapWindowPoints
gdi32
CreateFontIndirectW
GetStockObject
GetObjectW
DeleteObject
SelectObject
ExtSelectClipRgn
BitBlt
CreateRoundRectRgn
GetDeviceCaps
CreateDIBSection
StretchBlt
CreateCompatibleDC
DeleteDC
SaveDC
RestoreDC
GetWindowOrgEx
SetWindowOrgEx
SetStretchBltMode
GetObjectA
CreateRectRgnIndirect
shell32
ShellExecuteW
ole32
CoCreateInstance
CreateStreamOnHGlobal
Sections
.text Size: 398KB - Virtual size: 397KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ