Static task
static1
Behavioral task
behavioral1
Sample
0e098825c9c4c7043cc01ff22bf033fe3d8315d4a42a951f6654cb0128d4a024.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0e098825c9c4c7043cc01ff22bf033fe3d8315d4a42a951f6654cb0128d4a024.exe
Resource
win10v2004-20230915-en
General
-
Target
0e098825c9c4c7043cc01ff22bf033fe3d8315d4a42a951f6654cb0128d4a024
-
Size
2.5MB
-
MD5
5ad34f761a0e737d174bdaa3bfd49e91
-
SHA1
54ee5e20232d3e2118edf0a3de0e0d745f4944c5
-
SHA256
0e098825c9c4c7043cc01ff22bf033fe3d8315d4a42a951f6654cb0128d4a024
-
SHA512
7c222b6e3d7e4ecc00d7f1d081a1c4cb7373e823639f8ffb01286a498c257c2cd92c45049ed12dec0073cf1a5182ef7b66de5fcff929b85663f6f0a408c31991
-
SSDEEP
24576:PRYrBpHyMTGEk9WG7CHlW9HXb2mmYfuuU2GrWSQ9QqMLf5dUuDGs+8M6ADggM4s3:P+rmMTjALg8GiO5lvp/MQsra
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e098825c9c4c7043cc01ff22bf033fe3d8315d4a42a951f6654cb0128d4a024
Files
-
0e098825c9c4c7043cc01ff22bf033fe3d8315d4a42a951f6654cb0128d4a024.exe windows:4 windows x86
b751a218e595716c12cbe3ab19f11092
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowExA
GetDesktopWindow
GetWindow
IsWindowVisible
GetWindowTextA
GetClassNameA
GetWindowThreadProcessId
GetWindowTextLengthA
PostMessageA
CallWindowProcA
GetCursorPos
OpenClipboard
GetForegroundWindow
ClientToScreen
GetWindowLongA
SetWindowLongA
SetLayeredWindowAttributes
SetCursorPos
EnumDisplaySettingsA
UnhookWindowsHookEx
keybd_event
GetWindowRect
CharUpperA
FindWindowA
GetDlgItem
SetCapture
MapVirtualKeyA
AttachThreadInput
SetActiveWindow
GetGUIThreadInfo
ExitWindowsEx
mouse_event
GetParent
IsWindow
GetPropA
RemovePropA
DestroyWindow
SetPropA
CreateWindowExA
ShowWindow
IsZoomed
IsIconic
MoveWindow
GetDC
UpdateLayeredWindow
ReleaseDC
DefWindowProcA
ReleaseCapture
SetWindowsHookExA
CallNextHookEx
FlashWindowEx
EnableWindow
GetClientRect
GetWindowInfo
EnumWindows
SendInput
MsgWaitForMultipleObjects
ShowCursor
SendMessageTimeoutA
CreateWindowStationA
SetParent
UpdateWindow
SetTimer
GetFocus
GetKeyState
SetForegroundWindow
GetAncestor
SetWindowTextA
GetNextDlgTabItem
SetFocus
InvalidateRect
KillTimer
GetActiveWindow
GetDoubleClickTime
CharLowerA
wvsprintfA
SwapMouseButton
ChangeDisplaySettingsA
OpenIcon
EnumThreadWindows
ClipCursor
GetAsyncKeyState
GetKeyboardState
LoadCursorFromFileA
SetClassLongA
WindowFromPoint
ShowWindowAsync
SetWindowPos
GetDlgCtrlID
GetCaretPos
FlashWindow
PrintWindow
RegisterWindowMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
UnloadKeyboardLayout
GetKeyboardLayoutList
SystemParametersInfoA
GetKeyboardLayout
ActivateKeyboardLayout
GetKeyboardLayoutNameA
LoadKeyboardLayoutA
MessageBoxA
wsprintfA
CloseClipboard
GetClipboardData
PostQuitMessage
SetClipboardData
EmptyClipboard
GetSystemMetrics
SetCursor
EndDialog
CreateDialogIndirectParamA
DestroyMenu
LoadStringA
GetSysColorBrush
LoadCursorA
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
GetMenuItemID
GetClassLongA
GetMessageTime
GetMessagePos
GetWindowPlacement
UnregisterClassA
ValidateRect
PtInRect
GetMenuItemCount
TabbedTextOutA
DrawTextA
GrayStringA
GetLastActivePopup
EnumChildWindows
SendDlgItemMessageA
IsDialogMessageA
SendMessageA
IsWindowEnabled
DefWindowProcA
GetSystemMenu
DeleteMenu
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
SetRect
InflateRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
IsRectEmpty
ReleaseDC
IsChild
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SetWindowPos
MessageBoxA
GetCursorPos
GetSystemMetrics
EmptyClipboard
SetClipboardData
UnregisterClassA
GetClipboardData
CloseClipboard
wsprintfA
EnableMenuItem
GetSubMenu
GetDlgCtrlID
CreateAcceleratorTableA
CreateMenu
ModifyMenuA
AppendMenuA
CreatePopupMenu
GetClassInfoA
CreateIconFromResource
IsZoomed
PostQuitMessage
CopyAcceleratorTableA
GetKeyState
TranslateAcceleratorA
IsWindowEnabled
ShowWindow
CreateIconFromResourceEx
RegisterClipboardFormatA
SetRectEmpty
DispatchMessageA
GetMessageA
WindowFromPoint
DrawFocusRect
DrawEdge
DrawFrameControl
TranslateMessage
CharUpperA
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetForegroundWindow
GetLastActivePopup
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
ScrollWindowEx
IsDialogMessageA
MoveWindow
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
GetDesktopWindow
LoadStringA
SystemParametersInfoA
LoadImageA
LoadIconA
DrawTextA
SetWindowsHookExA
UnhookWindowsHookEx
EnumThreadWindows
GetWindowTextLengthA
GetClassNameA
EnumChildWindows
CallNextHookEx
CallWindowProcA
GetWindowDC
GetSysColorBrush
FrameRect
GetWindowTextA
SetWindowTextA
EnumDisplaySettingsA
DrawIconEx
ClientToScreen
SendMessageA
OpenClipboard
kernel32
GetCPInfo
IsBadCodePtr
SetStdHandle
FlushFileBuffers
GetProcessVersion
FindResourceA
LoadResource
LockResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
SetLastError
GlobalFlags
MulDiv
lstrcpyA
lstrcatA
lstrcmpiA
SetErrorMode
TlsGetValue
LocalReAlloc
FreeLibrary
WritePrivateProfileStringA
GetCurrentDirectoryA
SetLocalTime
SetFileAttributesA
RemoveDirectoryA
GetFileAttributesA
CreateDirectoryA
FindClose
FindFirstFileA
FindNextFileA
GetStartupInfoA
GetOEMCP
GetCommandLineA
RtlUnwind
GlobalReAlloc
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
GetLastError
CreateThread
GetTimeFormatA
GetDateFormatA
OpenEventA
GetProcessTimes
InitializeCriticalSection
CopyFileA
WaitForSingleObject
GetTickCount
GetFileSize
ResumeThread
GetCurrentProcessId
SetUnhandledExceptionFilter
CreateWaitableTimerA
OpenThread
GetModuleFileNameA
VirtualFreeEx
TerminateThread
VirtualAllocEx
GetUserDefaultLCID
IsBadReadPtr
HeapReAlloc
ExitProcess
VirtualFree
VirtualAlloc
lstrcpynA
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedDecrement
GetLongPathNameA
WriteFile
GetCurrentThreadId
Module32Next
GetShortPathNameA
CreateEventA
IsDebuggerPresent
DeleteFileA
DebugActiveProcess
HeapFree
GlobalFree
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
GetExitCodeProcess
ReadFile
PeekNamedPipe
CreateProcessA
CreatePipe
GetComputerNameA
GetVersionExA
DeviceIoControl
CreateFileA
Sleep
VirtualProtectEx
SetProcessWorkingSetSize
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
Thread32Next
Thread32First
TerminateProcess
SetThreadContext
SuspendThread
RtlFillMemory
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
TlsSetValue
FormatMessageA
SetEndOfFile
SetFilePointer
HeapCreate
GetVersion
GetStringTypeW
GetStringTypeA
LCMapStringW
RaiseException
HeapSize
GetACP
SetWaitableTimer
LCMapStringA
lstrlenA
GetCurrentThread
GetModuleHandleA
GetExitCodeThread
CreateRemoteThread
lstrcpyn
GetProcAddress
LoadLibraryA
LocalFree
WideCharToMultiByte
RtlMoveMemory
LocalAlloc
CloseHandle
Module32First
WriteProcessMemory
VirtualQueryEx
GetVolumeInformationA
MultiByteToWideChar
Process32Next
Process32First
CreateToolhelp32Snapshot
HeapAlloc
GetProcessHeap
GetCurrentProcess
MoveFileA
GetTempPathA
GetSystemDirectoryA
lstrcmpA
SetHandleCount
GetWindowsDirectoryA
ReadProcessMemory
GlobalDeleteAtom
TlsAlloc
GlobalHandle
OpenProcess
FileTimeToSystemTime
GetLocalTime
TlsFree
IsBadWritePtr
GetThreadTimes
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
SetStdHandle
GetACP
HeapSize
TerminateProcess
RaiseException
GetLocalTime
GetSystemTime
RtlUnwind
GetStartupInfoA
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GlobalFlags
GetCurrentThread
GetFileTime
GetFileSize
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
lstrcpynA
FileTimeToLocalFileTime
LocalFree
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
WaitForSingleObject
CloseHandle
lstrcmpiA
GetVersion
GetTimeZoneInformation
SetLastError
FileTimeToSystemTime
CreateMutexA
ReleaseMutex
TerminateThread
SuspendThread
SetCurrentDirectoryA
DeleteFileA
GetFileAttributesA
FindClose
FindFirstFileA
GetTempPathA
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
CreateEventA
CreateThread
WritePrivateProfileStringA
GetVersionExA
GetLastError
LoadLibraryA
FreeLibrary
GetFullPathNameA
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GlobalReAlloc
CreateSemaphoreA
FindNextFileA
lstrcpyA
WinExec
lstrlenA
lstrcatA
InitializeCriticalSection
DeleteCriticalSection
GlobalFree
GlobalSize
ExitProcess
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
lstrlenW
ReadFile
LockResource
LoadResource
FindResourceA
SetEvent
CreateFileA
WaitForMultipleObjects
WriteFile
GetProfileStringA
LeaveCriticalSection
EnterCriticalSection
ReleaseSemaphore
ResumeThread
ole32
OleInitialize
OleUninitialize
CLSIDFromString
CoCreateInstance
OleRun
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleRun
CoUninitialize
CoInitialize
CLSIDFromProgID
shell32
ShellExecuteA
SHGetFileInfoA
SHChangeNotify
SHFileOperationA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetSpecialFolderPathA
ShellExecuteA
Shell_NotifyIconA
shlwapi
PathFindExtensionA
PathIsDirectoryA
PathIsDirectoryEmptyA
PathIsSystemFolderA
PathRenameExtensionA
PathRemoveBlanksA
PathMakeSystemFolderA
PathUnmakeSystemFolderA
PathFileExistsA
PathFindFileNameA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
gdi32
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateBitmap
PtVisible
RectVisible
ExtTextOutA
SaveDC
GetClipBox
GetStockObject
SetBkColor
GetDeviceCaps
SetMapMode
Escape
GetObjectA
CreateCompatibleBitmap
GetPixel
TextOutA
SetTextColor
SetBkMode
CreateFontIndirectA
RestoreDC
CreateCompatibleDC
GetTextExtentPointA
CreateRectRgn
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetViewportExtEx
ExtSelectClipRgn
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
CreatePen
CreateBitmap
CreateDCA
CreateCompatibleBitmap
GetPolyFillMode
GetStretchBltMode
GetROP2
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
SetPixel
CreateRectRgnIndirect
SetBkColor
SetBkMode
LineTo
MoveToEx
SetTextColor
CreateEllipticRgnIndirect
GetTextMetricsA
GetCurrentObject
RoundRect
PatBlt
CombineRgn
CreateRectRgn
FillRgn
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetObjectA
EndPage
Arc
GetTextExtentPoint32A
GetDeviceCaps
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
GetPixel
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
SelectPalette
DPtoLP
gdiplus
GdipDrawRectangle
GdipSetClipHrgn
GdipDeletePath
GdipDeletePen
GdipSetSmoothingMode
GdipResetClip
GdipDrawPath
GdipCreatePen1
GdipCreateFromHDC
GdiplusStartup
GdipDeleteGraphics
wininet
HttpSendRequestA
InternetCloseHandle
InternetTimeToSystemTime
InternetSetCookieA
HttpQueryInfoA
InternetReadFile
InternetTimeFromSystemTime
HttpOpenRequestA
InternetOpenA
InternetConnectA
InternetCloseHandle
oleaut32
VariantTimeToSystemTime
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantInit
VariantChangeType
SystemTimeToVariantTime
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
VarR8FromCy
VarR8FromBool
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
SysFreeString
VariantClear
VariantChangeType
UnRegisterTypeLi
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SysAllocString
VariantInit
VariantCopyInd
SafeArrayGetElement
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
dbghelp
MakeSureDirectoryPathExists
advapi32
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
CryptGetHashParam
CryptDestroyHash
CryptHashData
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegFlushKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LookupAccountSidA
GetUserNameA
CryptAcquireContextA
CryptCreateHash
CryptReleaseContext
RegCreateKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueA
comdlg32
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
GetFileTitleA
GetFileTitleA
psapi
GetModuleFileNameExA
winhttp
WinHttpTimeFromSystemTime
WinHttpTimeToSystemTime
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
OpenPrinterA
DocumentPropertiesA
ClosePrinter
comctl32
ord17
_TrackMouseEvent
ord17
ImageList_Destroy
oledlg
ord8
rasapi32
RasGetConnectStatusA
RasHangUpA
winmm
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutRestart
msimg32
GradientFill
ws2_32
recvfrom
inet_ntoa
WSAStartup
WSACleanup
send
closesocket
select
ioctlsocket
recv
getpeername
accept
ntohl
WSAAsyncSelect
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 188KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 444KB - Virtual size: 634KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ