Static task
static1
Behavioral task
behavioral1
Sample
025eaf292b8079af9c61a7a8e46ad97784ac3346960b39611980a055ee532cbb.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
025eaf292b8079af9c61a7a8e46ad97784ac3346960b39611980a055ee532cbb.exe
Resource
win10v2004-20230915-en
General
-
Target
025eaf292b8079af9c61a7a8e46ad97784ac3346960b39611980a055ee532cbb
-
Size
10.7MB
-
MD5
4503f26f93b0e7853419c2cd2966f1b7
-
SHA1
5108ad268a49044d299023dded16ec9b20560cfa
-
SHA256
025eaf292b8079af9c61a7a8e46ad97784ac3346960b39611980a055ee532cbb
-
SHA512
475bb10dec4d18853bd1a03f141dd190e795414a13c75c5383db7f1d22f7836161d0396b034ffe9309861c6d7e29e43e82a8373feb309d45a716c206a4479e9f
-
SSDEEP
196608:5KV2rau3p6/QH05Xe9b58VXDDnpYIPGLnWxx20hT9V5b58VXDDnpYIHA:27lF1DDnaI6p1DDnaIg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 025eaf292b8079af9c61a7a8e46ad97784ac3346960b39611980a055ee532cbb
Files
-
025eaf292b8079af9c61a7a8e46ad97784ac3346960b39611980a055ee532cbb.exe windows:5 windows x86
5857af42d1b999efa67040bea079d580
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemDirectoryA
SleepEx
IsDBCSLeadByte
DosDateTimeToFileTime
lstrlenA
LCMapStringW
ExpandEnvironmentStringsA
OutputDebugStringW
WriteConsoleW
SetEnvironmentVariableA
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcessHeap
GetStdHandle
GetStringTypeW
IsValidCodePage
GetSystemTimeAsFileTime
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
VirtualQuery
GetSystemInfo
RaiseException
RtlUnwind
HeapReAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
GetModuleHandleExW
ExitThread
CreateThread
HeapAlloc
HeapFree
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTempFileNameA
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
GetACP
GetCPInfo
GetOEMCP
GetFileTime
GetFileSizeEx
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GetSystemDirectoryW
DecodePointer
EncodePointer
GetVolumeInformationA
LoadLibraryA
lstrcmpiA
GetModuleHandleW
GetModuleFileNameW
DuplicateHandle
UnlockFile
SetEndOfFile
FindResourceA
LockFile
GetFullPathNameA
GetFileAttributesW
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
CopyFileA
MulDiv
GlobalFree
GlobalUnlock
GlobalSize
SetLastError
CompareStringA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryExW
FreeLibrary
GetCurrentThreadId
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
VirtualAlloc
VirtualFree
AreFileApisANSI
CreateFileW
GetFileSize
GetCurrentDirectoryA
GetFileAttributesA
SetFileTime
SetFilePointer
GetVersion
LocalAlloc
lstrcpyA
lstrcmpA
GetLocalTime
GetTickCount
LocalFree
GetCurrentProcessId
GetProcAddress
SetThreadPriority
ReadFile
WriteFile
FormatMessageA
GetCurrentThread
WaitForSingleObject
InterlockedDecrement
SystemTimeToFileTime
InterlockedIncrement
PeekNamedPipe
CreateFileA
ExitProcess
CloseHandle
WaitForMultipleObjects
CreateEventA
SetEvent
FreeResource
DeleteFileA
OutputDebugStringA
GetModuleHandleA
GetModuleFileNameA
LockResource
FindClose
GetLastError
FindFirstFileA
CreateDirectoryA
MultiByteToWideChar
TerminateProcess
SizeofResource
Sleep
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetCommandLineA
GetFileAttributesExA
GetCurrentProcess
LoadResource
FindResourceW
LoadLibraryW
user32
GetMenuCheckMarkDimensions
GetForegroundWindow
SetActiveWindow
UpdateWindow
SetMenu
GetMenu
EnableWindow
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
GetClassInfoExA
GetClassInfoA
RegisterClassA
SetMenuItemBitmaps
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
SystemParametersInfoA
InflateRect
CopyRect
GetSysColor
GetMenuItemInfoA
DestroyMenu
UnhookWindowsHookEx
GetSystemMetrics
CharUpperA
GetDesktopWindow
RemoveMenu
AppendMenuA
SetMenuItemInfoA
GetMenuItemCount
GetMenuState
GetMenuStringA
PostMessageA
DestroyWindow
RegisterClassExA
GetParent
EnableMenuItem
CheckMenuItem
GetActiveWindow
TranslateMessage
GetMessageA
WinHelpA
ValidateRect
RedrawWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetWindowTextLengthA
AdjustWindowRectEx
MapWindowPoints
EqualRect
PtInRect
GetClassLongA
GetClassNameA
GetTopWindow
CallWindowProcA
GetLastActivePopup
LoadBitmapW
CopyImage
ShowOwnedPopups
SetCursor
IsWindowEnabled
GetWindowThreadProcessId
DeleteMenu
SetWindowTextA
ClientToScreen
RealChildWindowFromPoint
InvalidateRect
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
FillRect
GetSysColorBrush
GetWindow
CheckDlgButton
SendDlgItemMessageA
IsDialogMessageA
DestroyIcon
CreateDialogIndirectParamA
GetNextDlgTabItem
GetNextDlgGroupItem
GetCursorPos
SetCapture
ReleaseCapture
WindowFromPoint
EndDialog
MonitorFromWindow
MessageBoxA
GetMonitorInfoA
GetClientRect
LoadIconA
IsZoomed
KillTimer
IsIconic
PostQuitMessage
GetWindowRect
ScreenToClient
SetTimer
SetWindowRgn
FindWindowA
SendMessageA
GetCaretPos
ShowCaret
CharPrevA
SetCaretPos
CreateCaret
GetGUIThreadInfo
GetCaretBlinkTime
InvalidateRgn
CharNextA
SetMenuDefaultItem
IsWindow
LoadMenuW
LoadIconW
SetForegroundWindow
GetSubMenu
GetMenuItemID
DrawFocusRect
SetRectEmpty
OffsetRect
IsRectEmpty
LoadImageA
DrawIconEx
GetIconInfo
MessageBeep
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
LoadCursorW
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyA
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
LoadImageW
DrawEdge
DrawFrameControl
UnionRect
IsMenu
UpdateLayeredWindow
MonitorFromPoint
BringWindowToTop
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextA
TrackMouseEvent
GetComboBoxInfo
GetSystemMenu
PostThreadMessageA
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetCursorPos
SetRect
SetParent
LockWindowUpdate
SetClassLongA
GetDoubleClickTime
CopyIcon
SetWindowLongA
GetWindowLongA
CreateWindowExA
GetWindowRgn
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
FrameRect
DrawIcon
DestroyCursor
SetWindowsHookExA
CallNextHookEx
SetScrollInfo
IntersectRect
GetScrollInfo
MapDialogRect
CreateMenu
TrackPopupMenu
MoveWindow
LoadCursorA
ShowWindow
SetWindowPos
DefWindowProcA
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
InsertMenuA
DrawMenuBar
gdi32
MoveToEx
TextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
GetTextMetricsA
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polyline
Rectangle
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
RoundRect
FrameRgn
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
SetTextAlign
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
SetTextColor
SetBkColor
ExtTextOutA
GetObjectA
GetTextExtentPoint32A
CreateFontIndirectA
BitBlt
GetDeviceCaps
CreateDCA
CloseEnhMetaFile
CreateEnhMetaFileA
GetEnhMetaFileHeader
PlayEnhMetaFile
CreatePenIndirect
GetCharABCWidthsA
GdiFlush
CopyMetaFileA
GetTextColor
DeleteDC
CreateDIBSection
SelectObject
PtInRegion
CreateCompatibleDC
CreateRectRgn
DeleteObject
Polygon
CreateRoundRectRgn
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
CryptAcquireContextA
RegOpenKeyExA
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptCreateHash
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
shell32
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
Shell_NotifyIconA
SHGetFileInfoA
SHGetDesktopFolder
DragQueryFileA
ShellExecuteA
SHBrowseForFolderA
DragFinish
shlwapi
PathIsDirectoryA
PathStripPathA
PathFileExistsA
PathFindExtensionA
PathFindFileNameA
UrlUnescapeA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW
StrFormatKBSizeA
uxtheme
GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed
ole32
CoUninitialize
CoInitialize
CLSIDFromProgID
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
CLSIDFromString
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoCreateGuid
CoCreateInstance
oleaut32
VariantInit
VariantChangeType
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
VariantClear
SysAllocString
SysFreeString
SysAllocStringLen
imm32
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
gdiplus
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdipGetImageWidth
GdipFree
GdipAlloc
GdipGetPropertyItem
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipFillRectangleI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdiplusStartup
GdipCreateBitmapFromScan0
GdipBitmapLockBits
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
ws2_32
closesocket
inet_ntoa
WSACleanup
sendto
ioctlsocket
accept
listen
getservbyport
gethostbyaddr
getservbyname
htonl
bind
WSAIoctl
setsockopt
getsockopt
ntohs
getpeername
getsockname
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
gethostname
connect
htons
recv
socket
recvfrom
WSAStartup
send
gethostbyname
inet_addr
iphlpapi
GetAdaptersInfo
imagehlp
MakeSureDirectoryPathExists
winmm
PlaySoundA
wldap32
ord60
ord143
ord211
ord22
ord26
ord30
ord32
ord35
ord200
ord33
ord301
ord27
ord41
ord46
ord79
ord50
wininet
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetSetOptionExA
InternetQueryOptionA
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
msvcr110
fputs
qsort
fopen
fgets
fclose
strncmp
memchr
_beginthreadex
_isctype
__mb_cur_max
_pctype
strtol
setlocale
fgetc
fgetpos
fputc
fsetpos
_fseeki64
setvbuf
_wcsdup
_lseeki64
atoi
memmove
strstr
strtoul
strchr
_iob
fwrite
fread
sscanf
tolower
_errno
_sys_nerr
strerror
strncpy
strrchr
malloc
free
realloc
calloc
pow
_lrotl
__RTDynamicCast
_itoa
strcat
strcpy
_stat32i64
_gmtime32
_fstat32i64
_time32
_strnicmp
_stricmp
_write
_read
fflush
_ftol
fseek
getenv
_strdup
_open
_close
sprintf
comctl32
InitCommonControlsEx
_TrackMouseEvent
ord17
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 369KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8.0MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 487KB - Virtual size: 487KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ