Static task
static1
Behavioral task
behavioral1
Sample
48100253f923e2dbb62f526964722d562b77dd55835cdbe4a1ee45c6c17a539d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
48100253f923e2dbb62f526964722d562b77dd55835cdbe4a1ee45c6c17a539d.exe
Resource
win10v2004-20230915-en
General
-
Target
48100253f923e2dbb62f526964722d562b77dd55835cdbe4a1ee45c6c17a539d
-
Size
580KB
-
MD5
3979245136c706256c1e02b69dc75cb1
-
SHA1
8d2bde3df6c6748451a1e398387968ec1f04c65e
-
SHA256
48100253f923e2dbb62f526964722d562b77dd55835cdbe4a1ee45c6c17a539d
-
SHA512
caad888ac19b3f4e499ffe93042bb29e2505e9c048072035ea0016f67aa5329f68dadf7a43373067be605255fe55b554e65ce181d64c02d9d0793fe43384da63
-
SSDEEP
6144:56n+PIjKwz6McNM5YtI19+AcZUtswwnm25jn+3mMCOUve5EpqCBwm5Mw1o4M6L5R:5iZcKYF5AYvlI9pGHNu4B2U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48100253f923e2dbb62f526964722d562b77dd55835cdbe4a1ee45c6c17a539d
Files
-
48100253f923e2dbb62f526964722d562b77dd55835cdbe4a1ee45c6c17a539d.exe windows:5 windows x64
10fd342547319db4f982e3dfc9c70d60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mfc100
ord310
ord5298
ord990
ord5617
ord5094
ord7924
ord3603
ord6929
ord11846
ord6924
ord4971
ord4393
ord6126
ord999
ord461
ord8004
ord3354
ord5045
ord12135
ord8028
ord2168
ord3843
ord10803
ord3271
ord10704
ord7056
ord2669
ord7224
ord4273
ord4274
ord5237
ord11037
ord1504
ord12144
ord5050
ord12142
ord5049
ord10091
ord5067
ord7640
ord8137
ord10448
ord10440
ord4561
ord3280
ord3932
ord10153
ord9118
ord2685
ord10442
ord1733
ord9532
ord13482
ord4790
ord4789
ord13553
ord13608
ord13603
ord13693
ord13694
ord13695
ord13692
ord4636
ord13696
ord13689
ord13753
ord10730
ord5969
ord6442
ord2028
ord2024
ord12710
ord12936
ord2053
ord405
ord5586
ord4687
ord4689
ord11331
ord4106
ord2018
ord3961
ord955
ord896
ord2440
ord2435
ord324
ord10593
ord409
ord307
ord311
ord10961
ord1986
ord1419
ord456
ord995
ord11160
ord4043
ord1587
ord6334
ord10746
ord4477
ord10391
ord5893
ord5813
ord2137
ord5540
ord2136
ord11605
ord1223
ord362
ord832
ord8017
ord2283
ord5886
ord10711
ord7141
ord9946
ord9949
ord8291
ord8306
ord8296
ord8726
ord8730
ord8308
ord9802
ord7727
ord7717
ord9807
ord7805
ord9828
ord8789
ord8790
ord6676
ord921
ord3299
ord265
ord12337
ord12600
ord9207
ord7194
ord7622
ord1244
ord2454
ord12974
ord10602
ord856
ord6560
ord11620
ord11621
ord784
ord3995
ord3980
ord9139
ord5890
ord4042
ord12333
ord10544
ord11125
ord4340
ord1415
ord11005
ord957
ord2441
ord4740
ord4743
ord7033
ord4050
ord4034
ord411
ord7038
ord2530
ord6919
ord1689
ord3514
ord11807
ord336
ord8886
ord8887
ord3254
ord12090
ord4940
ord5892
ord6920
ord11200
ord6901
ord1691
ord354
ord10745
ord2284
ord9947
ord9950
ord9803
ord914
ord6364
ord6575
ord11247
ord1420
ord11161
ord7324
ord4308
ord11295
ord301
ord3243
ord1267
ord13495
ord877
ord5872
ord8977
ord4895
ord11470
ord10840
ord10871
ord9145
ord7063
ord10867
ord10859
ord5031
ord3288
ord13107
ord13110
ord13108
ord13111
ord13106
ord13109
ord6868
ord11099
ord12808
ord10609
ord13700
ord1709
ord6823
ord11489
ord3477
ord3535
ord8182
ord12925
ord6806
ord12927
ord11107
ord11106
ord2116
ord4555
ord13393
ord11410
ord7213
ord7286
ord7277
ord2380
ord11548
ord10534
ord12579
ord7769
ord7999
ord7295
ord12665
ord11145
ord3935
ord1966
ord1605
ord7283
ord4347
ord1564
ord703
ord12454
ord6602
ord6249
ord6888
ord6867
ord6828
ord7278
ord12311
ord13336
ord1863
ord1947
ord1951
ord2526
ord5564
ord6580
ord8881
ord8884
ord8888
ord6074
ord6431
ord941
ord392
ord8003
ord8978
ord13361
ord12442
ord12249
ord2423
ord4765
ord5301
ord7874
ord3292
ord9710
ord9938
ord7988
ord11333
ord4734
ord11139
ord13749
ord13667
ord13754
ord13282
ord13501
ord13277
ord13478
ord13489
ord13343
ord8266
ord2318
ord11505
ord10716
ord12004
ord3475
ord12849
ord4568
ord4560
ord9143
ord13668
ord13429
ord13430
ord13409
ord13440
ord4608
ord9662
ord3285
ord6129
ord12971
ord10732
ord2171
ord3846
ord1119
ord1067
ord669
ord566
ord5683
ord12053
ord12412
ord12103
ord12425
ord6604
ord4577
ord12455
ord11943
ord5496
ord4451
ord4921
ord13000
ord7746
ord6779
ord5396
ord5404
ord12246
ord10171
ord12673
ord12241
ord2605
ord12244
ord12195
ord8521
ord8327
ord7817
ord2304
ord2474
ord3992
ord4015
ord4009
ord4020
ord12883
ord7734
ord11074
ord5421
ord4643
ord4817
ord13010
ord8473
ord4982
ord4978
ord9233
ord1697
ord4672
ord4667
ord13033
ord7674
ord9348
ord9401
ord9495
ord9307
ord10408
ord7669
ord11318
ord4949
ord4641
ord3639
ord7935
ord8907
ord8379
ord11717
ord1094
ord1065
ord1001
ord4889
ord630
ord562
ord464
ord8008
ord6803
ord8031
ord10805
ord3272
ord7226
ord4275
ord11038
ord1502
ord12145
ord12143
ord10092
ord5066
ord7642
ord8139
ord10449
ord10444
ord3282
ord2762
ord6696
ord1734
ord9533
ord10151
ord2575
ord12690
ord10075
ord12922
ord10169
ord7996
ord8489
ord10162
ord1724
ord7244
ord11502
ord2807
ord2909
ord4880
ord1555
ord12956
ord13664
ord6252
ord12386
ord13140
ord13621
ord13122
ord6254
ord6251
ord6255
ord7342
ord6253
ord11933
ord6250
ord5291
ord4759
ord12500
ord12829
ord11565
ord13745
ord4747
ord3720
ord1570
ord1569
ord631
ord2703
ord2702
ord8092
ord4746
ord4775
ord4739
ord6445
ord1241
ord5849
ord7927
ord2745
ord3614
ord3153
ord5546
ord5071
ord4249
ord4258
ord4216
ord1473
ord7919
ord2654
ord3598
ord7559
ord9014
ord12088
ord3150
ord4392
ord12098
ord6581
msvcr100
free
malloc
??0exception@std@@QEAA@AEBV01@@Z
_CxxThrowException
memmove
memcpy
??1exception@std@@UEAA@XZ
?what@exception@std@@UEBAPEBDXZ
??0exception@std@@QEAA@AEBQEBD@Z
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_setmbcp
__crt_debugger_hook
__CxxFrameHandler3
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__getmainargs
_amsg_exit
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__C_specific_handler
_access
memset
_mbsnbcpy
_purecall
atoi
atof
_mktime64
_localtime64_s
strftime
kernel32
Sleep
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
EncodePointer
GetVersionExA
GetTickCount
LoadLibraryA
GetProcAddress
FreeLibrary
CreateDirectoryA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
RtlVirtualUnwind
user32
RegisterWindowMessageA
GetFocus
IsWindowEnabled
SetFocus
KillTimer
SetTimer
FindWindowExA
IsWindow
GetParent
GetSysColor
ReleaseDC
GetWindowDC
DrawFocusRect
FrameRect
OffsetRect
InflateRect
CopyRect
GetSystemMetrics
SetCursor
LoadCursorA
IsRectEmpty
RedrawWindow
GetWindowRect
LockWindowUpdate
UpdateWindow
IsWindowVisible
CheckMenuItem
FillRect
SetRect
InvalidateRect
TabbedTextOutA
ClientToScreen
AppendMenuA
CreatePopupMenu
GetTabbedTextExtentA
PostMessageA
GetClientRect
GetDC
GetCursorPos
SendMessageA
EnableWindow
ScreenToClient
LoadMenuW
RemoveMenu
GetSubMenu
gdi32
GetTextMetricsA
BitBlt
Ellipse
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetTextExtentPoint32A
comdlg32
GetOpenFileNameA
GetSaveFileNameA
shell32
ShellExecuteA
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsA
ole32
CoInitialize
CoCreateInstance
OleRun
CoUninitialize
oleaut32
VariantClear
SysFreeString
SysAllocString
GetErrorInfo
msvcp100
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?_Orphan_all@_Container_base0@std@@QEAAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_BADOFF@std@@3_JB
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
Sections
.text Size: 225KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ