Static task
static1
Behavioral task
behavioral1
Sample
92e8ea94117b113df8f355ac7d7c884937ffa98f87afe5b21ecaa792822ac8a9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
92e8ea94117b113df8f355ac7d7c884937ffa98f87afe5b21ecaa792822ac8a9.exe
Resource
win10v2004-20230915-en
General
-
Target
92e8ea94117b113df8f355ac7d7c884937ffa98f87afe5b21ecaa792822ac8a9
-
Size
630KB
-
MD5
d6230ffa8daa444bf5225dabde995ced
-
SHA1
14b88f3feda9b9bdd1d9955b6867860f896c21e0
-
SHA256
92e8ea94117b113df8f355ac7d7c884937ffa98f87afe5b21ecaa792822ac8a9
-
SHA512
9345384264688f64c7028bec60449f121d9eb2b299089430a0d004a59f3570fd304759fe8722180557ae890952d22cd133f718941986b2b37274f664bdbf844b
-
SSDEEP
12288:3VZuGiMROMl72UyruwNGn5xrVM3B1N0jbJgW1mC/MhLWYiYhxPX:3VZukROG6rvA5dV2abJVUC/Gx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92e8ea94117b113df8f355ac7d7c884937ffa98f87afe5b21ecaa792822ac8a9
Files
-
92e8ea94117b113df8f355ac7d7c884937ffa98f87afe5b21ecaa792822ac8a9.exe windows:5 windows x86
0b9acbcf1a785ebccdc5fd73455e75f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
VirtualAlloc
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
LockResource
LoadResource
FindResourceW
lstrcmpiW
MulDiv
GetVersion
MultiByteToWideChar
FindClose
FindFirstFileW
Sleep
DeleteFileW
GetFileAttributesW
CopyFileW
WideCharToMultiByte
lstrcmpW
FreeEnvironmentStringsW
lstrlenW
GetEnvironmentStringsW
GetLastError
CloseHandle
CreateFileW
lstrcatW
lstrcpyW
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleFileNameW
GetVersionExW
GetLocaleInfoW
GetFileTime
IsBadReadPtr
GetExitCodeThread
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GlobalSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SleepEx
LocalAlloc
LocalFree
GlobalHandle
WinExec
SetLastError
FormatMessageW
GetCurrentProcessId
GlobalAddAtomW
GlobalGetAtomNameW
GetModuleHandleW
GetVersionExA
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GetCurrentThreadId
FreeResource
GetProfileIntW
GetFileType
InterlockedDecrement
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventW
GetModuleHandleA
lstrcmpA
lstrlenA
InterlockedExchange
CompareStringA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
GetFileSizeEx
InterlockedIncrement
TlsGetValue
GlobalReAlloc
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
WritePrivateProfileStringW
SetErrorMode
GetStartupInfoW
RtlUnwind
ExitProcess
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RaiseException
HeapReAlloc
ExitThread
CreateThread
SetStdHandle
SizeofResource
user32
DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
IsClipboardFormatAvailable
PostQuitMessage
ShowOwnedPopups
CharUpperW
GetSysColorBrush
UnregisterClassW
PostThreadMessageW
SetDlgItemTextW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
CreateWindowExW
GetClassInfoExW
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DefWindowProcW
DrawTextW
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
CheckMenuItem
IsDialogMessageW
GetClassNameW
UnpackDDElParam
ReuseDDElParam
DestroyMenu
WinHelpW
SetWindowPos
SetFocus
GetActiveWindow
EqualRect
SetWindowLongW
GetKeyState
PeekMessageW
GetCapture
LoadAcceleratorsW
SetActiveWindow
IsIconic
InsertMenuItemW
CreatePopupMenu
GetClassInfoW
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetMenu
BringWindowToTop
GetWindow
ShowWindow
GetWindowThreadProcessId
GetWindowLongW
IsWindowEnabled
GetMenuState
GetMenuItemID
GetMenuItemCount
SetCapture
DrawFocusRect
InflateRect
MessageBeep
SetCursor
ReleaseCapture
ShowScrollBar
GetSysColor
TranslateAcceleratorW
GetDC
ReleaseDC
KillTimer
SetTimer
GetParent
GetDlgItem
GetDesktopWindow
MessageBoxW
LoadImageW
GetCursorPos
GetSystemMetrics
LoadMenuW
TabbedTextOutW
FillRect
GetMenuItemInfoW
GetMessageW
TranslateMessage
ValidateRect
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
WindowFromPoint
CallWindowProcW
SetRect
AppendMenuW
SystemParametersInfoW
LoadIconW
RegisterClassW
LoadCursorW
SetMenu
SendMessageW
MoveWindow
EnableWindow
GetForegroundWindow
GetLastActivePopup
IsWindowVisible
InvalidateRect
UpdateWindow
ClientToScreen
GetClientRect
GetWindowRect
IsZoomed
PostMessageW
SetWindowTextW
RemoveMenu
GetSubMenu
EnableMenuItem
RegisterClipboardFormatW
IsWindow
PtInRect
GetDlgCtrlID
gdi32
GetPaletteEntries
CreateHalftonePalette
GetTextMetricsW
CreateSolidBrush
CreatePen
SelectPalette
GetStockObject
CreatePatternBrush
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutW
RectVisible
PtVisible
GetPixel
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
ExtTextOutW
GetBkColor
CreateFontW
GetCharWidthW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateCompatibleBitmap
CopyMetaFileW
GetDeviceCaps
GetTextExtentPoint32W
CreateFontIndirectW
SetStretchBltMode
StretchDIBits
GetViewportOrgEx
GetObjectW
GetDIBColorTable
DeleteDC
DeleteObject
BitBlt
RealizePalette
SelectObject
CreateCompatibleDC
CreatePalette
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegQueryValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
shell32
ShellExecuteW
DragQueryFileW
DragFinish
ole32
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleInitialize
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
CoRegisterMessageFilter
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx
OleUninitialize
winmm
waveInStop
waveOutReset
waveInStart
waveOutRestart
waveOutPause
PlaySoundW
mixerGetLineControlsW
mixerOpen
mixerClose
mixerGetNumDevs
mixerGetLineInfoW
mixerGetDevCapsW
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetID
timeGetTime
timeSetEvent
timeKillEvent
waveOutGetPosition
waveInGetPosition
waveOutOpen
waveInOpen
sndPlaySoundW
waveOutClose
waveInClose
waveOutPrepareHeader
waveInPrepareHeader
waveOutUnprepareHeader
waveInUnprepareHeader
waveOutWrite
oledlg
OleUIBusyW
avifil32
AVIStreamTimeToSample
AVIFileOpenW
AVIStreamGetFrameOpen
AVIStreamGetFrame
AVIStreamGetFrameClose
AVIStreamFindSample
AVIFileInfoW
AVIStreamRelease
AVIFileRelease
AVIStreamStart
AVIStreamReadFormat
AVIStreamInfoW
AVIStreamLength
AVIStreamSampleToTime
AVIFileGetStream
AVIFileExit
AVIStreamRead
AVIFileInit
msvfw32
ICClose
ICOpen
Sections
.text Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ