Static task
static1
Behavioral task
behavioral1
Sample
b992c9d70094a8f1c7f31b97cb924d13c87edd41b7a5a908bbf7d9f887445b9a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b992c9d70094a8f1c7f31b97cb924d13c87edd41b7a5a908bbf7d9f887445b9a.exe
Resource
win10v2004-20230915-en
General
-
Target
b992c9d70094a8f1c7f31b97cb924d13c87edd41b7a5a908bbf7d9f887445b9a
-
Size
6.3MB
-
MD5
0fba02b4c1d2eb9b1b84dda488b947b6
-
SHA1
c755ff80f6f2332098e62853e553e74cd7260bd0
-
SHA256
b992c9d70094a8f1c7f31b97cb924d13c87edd41b7a5a908bbf7d9f887445b9a
-
SHA512
f6490e62aed9ff0043f814c1c7a84ff3358f04bbf6fd1ccfe5586b914cbea91fe07a22dbe14416455b3b1b99eada976a3a3bc704247c62ea391f3d1d348d7635
-
SSDEEP
98304:Z/Wi/nftdaUMeiGKVsaVhqDv3a9tDnisBNtcN3VtC2jdwM:AknlFMbTVhq7ytY9Vo2jdw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b992c9d70094a8f1c7f31b97cb924d13c87edd41b7a5a908bbf7d9f887445b9a
Files
-
b992c9d70094a8f1c7f31b97cb924d13c87edd41b7a5a908bbf7d9f887445b9a.exe windows:5 windows x86
310dce343407bbc912e9a3a7c98ea845
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
LCMapStringW
VirtualFree
FatalAppExitA
GetTimeZoneInformation
GetStdHandle
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
SetHandleCount
CompareStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetUserDefaultLCID
EnumSystemLocalesA
GetFileType
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEnvironmentVariableA
SetStdHandle
GetStartupInfoA
GetCommandLineA
HeapReAlloc
VirtualQuery
VirtualAlloc
GetDateFormatA
GetStringTypeA
ExitProcess
CreateThread
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
RtlUnwind
SetErrorMode
GetModuleHandleW
GetAtomNameA
GetOEMCP
GetCPInfo
GlobalFlags
VirtualProtect
TlsFree
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileInformationByHandle
FileTimeToDosDateTime
DosDateTimeToFileTime
FlushInstructionCache
GetTempPathA
GetVersion
FindResourceExW
DebugBreak
IsValidCodePage
GetTimeFormatA
HeapSize
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
GetFileSizeEx
GetFileAttributesExA
GetShortPathNameA
GetFullPathNameA
DuplicateHandle
FlushFileBuffers
GetThreadLocale
GetStringTypeExA
GetModuleFileNameW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GlobalSize
FileTimeToSystemTime
GetSystemTime
LoadLibraryW
GetSystemDirectoryW
GetSystemDirectoryA
Process32First
Process32Next
ExpandEnvironmentStringsA
WinExec
FindResourceExA
GetExitCodeProcess
GlobalMemoryStatus
CopyFileA
TlsAlloc
TlsSetValue
GetSystemInfo
GetProcessHeap
SetFileAttributesA
FormatMessageA
GetCurrentThreadId
lstrcatA
SetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcmpiA
InterlockedIncrement
LoadLibraryExA
InterlockedDecrement
InterlockedCompareExchange
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
lstrcpynA
OpenProcess
TerminateProcess
GetFileAttributesW
CopyFileW
GetProfileIntA
SearchPathA
GetTempPathW
GetTempFileNameW
CreateProcessA
GetWindowsDirectoryA
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjects
FreeResource
GlobalAlloc
ResumeThread
GlobalLock
GlobalUnlock
GlobalFree
CreateEventA
IsDBCSLeadByte
LCMapStringA
DeviceIoControl
MulDiv
GetCurrentDirectoryA
SetCurrentDirectoryA
RemoveDirectoryA
LockFile
WriteFile
UnlockFile
ReadFile
MoveFileA
FindFirstFileA
FindNextFileA
FindClose
GetFileSize
SetFilePointer
SetEndOfFile
CreateFileA
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32First
Module32Next
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory
GetLogicalDriveStringsA
GetDriveTypeA
GetVolumeInformationA
SuspendThread
OpenMutexA
CreateMutexA
LocalFree
LocalAlloc
OutputDebugStringA
lstrcpyA
ResetEvent
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
SetLastError
GetExitCodeThread
GetLocalTime
LoadLibraryA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
FreeLibrary
GetPrivateProfileStringA
Sleep
lstrcmpA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
lstrlenA
MultiByteToWideChar
GetLastError
GetFileAttributesA
CreateDirectoryA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileTime
FileTimeToLocalFileTime
GetACP
GetTickCount
DeleteFileA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
WritePrivateProfileStringA
GetVersionExA
GetPrivateProfileIntA
IsValidLocale
CreateFileW
user32
GetWindowRgn
GetDCEx
ClipCursor
DestroyIcon
LockWindowUpdate
GetSystemMenu
DrawIcon
SetWindowPos
RemovePropA
mouse_event
MessageBeep
ExitWindowsEx
IsChild
SetFocus
SetClassLongA
BringWindowToTop
GetPropA
GetLastActivePopup
FlashWindow
GetMenuStringA
InsertMenuA
InsertMenuItemA
GetClassNameA
PostThreadMessageA
SendMessageTimeoutA
GrayStringA
DrawTextExA
TabbedTextOutA
MessageBoxA
wsprintfA
GetWindowDC
SetWindowRgn
GetWindowLongA
IsIconic
EmptyClipboard
SetClipboardData
MessageBoxW
ClientToScreen
EnableMenuItem
CreatePopupMenu
GetCursorInfo
AppendMenuA
DrawFocusRect
GetDesktopWindow
SetRectEmpty
UnionRect
IntersectRect
FindWindowA
DefWindowProcA
ShowWindow
SetForegroundWindow
CopyIcon
SetWindowLongA
DestroyCursor
GetMessageTime
UnhookWindowsHookEx
DrawStateA
TrackMouseEvent
CallWindowProcA
SetWindowTextA
IsWindowEnabled
GetKeyNameTextA
DrawIconEx
GetSysColor
FillRect
GetWindow
ModifyMenuA
GetMenuItemID
GetMenuItemInfoA
GetMenuStringW
GetWindowTextLengthW
GetWindowTextW
GetFocus
LoadBitmapA
LoadImageA
ChangeDisplaySettingsA
EnumDisplayDevicesA
DrawTextA
GetDlgCtrlID
GetMessageA
LoadIconA
OpenClipboard
GetClipboardData
CloseClipboard
SetParent
CheckMenuItem
TranslateMessage
CopyRect
GetAsyncKeyState
TranslateAcceleratorA
MonitorFromWindow
GetMonitorInfoA
SystemParametersInfoA
GetSystemMetrics
RegisterHotKey
UnregisterHotKey
UpdateWindow
WindowFromPoint
DestroyAcceleratorTable
CreateAcceleratorTableA
CreateCaret
HideCaret
ShowCaret
SetCaretPos
ScrollWindowEx
MoveWindow
GetIconInfo
GetWindowPlacement
GetMenu
SetWindowPlacement
DeferWindowPos
AdjustWindowRectEx
GetClassInfoExA
GetScrollRange
SetMenu
SetPropA
LoadMenuA
CharLowerA
SetCursorPos
SetActiveWindow
DrawTextW
GetNextDlgGroupItem
IsZoomed
WaitMessage
PeekMessageW
GetScrollInfo
GetScrollPos
GetClassInfoA
ShowScrollBar
EnableScrollBar
SetScrollRange
SetScrollInfo
IsDialogMessageA
SetScrollPos
GetParent
EnableWindow
SendMessageA
RegisterWindowMessageA
GetKeyState
GetClientRect
GetCursorPos
CopyAcceleratorTableA
LoadAcceleratorsA
ScreenToClient
IsWindowVisible
PostMessageA
PtInRect
ReleaseCapture
SetCursor
LoadCursorA
IsWindow
InflateRect
GetWindowRect
InvalidateRect
RedrawWindow
SetTimer
KillTimer
GetCapture
SetCapture
ReleaseDC
GetDC
MapWindowPoints
IsRectEmpty
MonitorFromPoint
GetMenuItemRect
GetMenuDefaultItem
CreateIconIndirect
IsMenu
LoadCursorFromFileA
FindWindowExA
WindowFromDC
MessageBoxIndirectA
FrameRect
DestroyWindow
GetTopWindow
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
WinHelpA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
GetDialogBaseUnits
RegisterClipboardFormatA
UnregisterClassA
GetSysColorBrush
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
ValidateRect
DestroyMenu
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
CharNextA
InvalidateRgn
GetWindowThreadProcessId
CharUpperA
EndPaint
BeginPaint
RemoveMenu
MapVirtualKeyA
ModifyMenuW
AppendMenuW
DrawTextExW
LoadBitmapW
LoadImageW
LoadIconW
LoadStringW
InsertMenuW
InsertMenuItemW
DrawFrameControl
LoadStringA
wvsprintfA
SetMenuInfo
CreateWindowExA
RegisterClassA
SetRect
OffsetRect
EqualRect
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
TrackPopupMenu
GetMenuState
GetMenuItemCount
DeleteMenu
SetMenuItemInfoA
GetSubMenu
TrackPopupMenuEx
ScrollWindow
GetMessagePos
IsDlgButtonChecked
gdi32
CreateDIBitmap
CreateDIBSection
RealizePalette
SetDIBitsToDevice
SetStretchBltMode
ExtSelectClipRgn
StretchDIBits
GetDCOrgEx
CopyMetaFileA
CreateDCA
SaveDC
SetPolyFillMode
SetROP2
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
SelectClipPath
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
RestoreDC
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
CreateDIBPatternBrushPt
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
SetRectRgn
DPtoLP
GetCharWidthA
CreateRectRgnIndirect
CreateICA
GetRgnBox
CreateRoundRectRgn
FrameRgn
FillRgn
CreatePolygonRgn
CreateEllipticRgn
Rectangle
UnrealizeObject
CreatePatternBrush
EnumFontFamiliesExA
CreateFontA
GetTextColor
GetBkColor
OffsetRgn
SetBkColor
CreateBitmap
Escape
RectVisible
PtVisible
GetMapMode
SetMapMode
GetWindowExtEx
GetViewportExtEx
CreatePen
GetPixel
CreateRectRgn
CombineRgn
StretchBlt
CreateFontIndirectA
BitBlt
SetTextColor
SetBkMode
GetDeviceCaps
TextOutA
GetStockObject
BeginPath
EndPath
StrokeAndFillPath
GetObjectA
GetDIBits
GetTextExtentPoint32W
GetTextExtentPointA
GetTextExtentPointW
TextOutW
GetViewportOrgEx
GetWindowOrgEx
SetBrushOrgEx
CreateBitmapIndirect
SetPixel
GetNearestColor
SetPixelV
RoundRect
PlgBlt
GetCurrentObject
SetBoundsRect
GetBkMode
ExtCreateRegion
GetClipBox
CreateSolidBrush
PatBlt
GetTextMetricsA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
CreateFontIndirectW
DeleteObject
SelectObject
SetWindowOrgEx
ExtTextOutA
GetTextExtentPoint32A
msimg32
AlphaBlend
comdlg32
GetFileTitleA
ChooseColorA
ChooseColorW
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
InitializeSecurityDescriptor
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegEnumKeyA
RegQueryValueExW
RegSetValueExW
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegSetValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LookupAccountNameA
GetFileSecurityA
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
RegCloseKey
SetSecurityDescriptorDacl
RegCreateKeyExA
RegQueryValueA
OpenSCManagerA
OpenServiceA
ControlService
CloseServiceHandle
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptAcquireContextA
CryptReleaseContext
RegDeleteValueA
RegDeleteKeyA
shell32
ExtractIconA
SHGetFileInfoA
Shell_NotifyIconA
SHChangeNotify
DragQueryFileA
DragFinish
ShellExecuteExA
ShellExecuteExW
SHGetDesktopFolder
SHBrowseForFolderA
ShellExecuteA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
comctl32
_TrackMouseEvent
ImageList_AddMasked
ImageList_Duplicate
ImageList_GetImageInfo
ImageList_Destroy
ImageList_DrawIndirect
ImageList_Copy
ImageList_Draw
ImageList_GetIcon
shlwapi
PathFindExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
UrlUnescapeA
PathRemoveFileSpecA
PathSkipRootA
PathAddBackslashA
PathIsRootA
SHGetValueA
PathIsDirectoryA
UrlEscapeW
UrlEscapeA
PathFindFileNameA
PathFileExistsA
PathRemoveExtensionA
oledlg
ord8
ole32
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
StringFromGUID2
CLSIDFromProgID
CoInitializeEx
CoDisconnectObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleDuplicateData
CoTaskMemAlloc
OleSetClipboard
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleRun
CreateStreamOnHGlobal
CoCreateInstance
CLSIDFromString
CoUninitialize
CoInitialize
OleIsCurrentClipboard
ReleaseStgMedium
CoTaskMemRealloc
CoCreateGuid
CoRegisterMessageFilter
OleFlushClipboard
oleaut32
SetErrorInfo
GetErrorInfo
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
SysReAllocStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayUnaccessData
CreateErrorInfo
VariantCopy
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
VarBstrCmp
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
OleLoadPicture
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopyInd
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
SysAllocString
VarUI4FromStr
OleCreateFontIndirect
gdiplus
GdiplusStartup
GdipGetPropertyItem
GdiplusShutdown
GdipDrawImageI
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSetPenEndCap
GdipSetPenStartCap
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipDrawImage
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipDrawRectangleI
GdipCloneFont
GdipNewInstalledFontCollection
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipCreateBitmapFromStreamICM
GdipSetClipRect
GdipSetPenDashStyle
GdipCreateHBITMAPFromBitmap
GdipSetImageAttributesColorMatrix
GdipMeasureString
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipCreateFont
GdipDrawString
GdipStringFormatGetGenericTypographic
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipGetStringFormatFlags
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetSolidFillColor
GdipResetClip
GdipSetClipRectI
GdipFillEllipse
GdipDrawEllipse
GdipDrawLinesI
GdipDrawLineI
GdipDeleteCustomLineCap
GdipCreateAdjustableArrowCap
GdipSetPenBrushFill
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCloneImage
GdipDisposeImage
GdipGetFontSize
GdipDeleteFont
GdipGetLogFontW
GdipDrawImageRectRect
GdipFillRectangle
GdipDrawRectangle
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipSetPenDashArray
GdipDeletePen
GdipCreatePen1
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetImageAttributesColorKeys
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree
GdipGetFontCollectionFamilyCount
GdipCreateBitmapFromStream
GdipSetPenCustomEndCap
ws2_32
gethostbyname
htons
setsockopt
socket
closesocket
shutdown
send
recv
getsockname
WSAGetLastError
bind
recvfrom
sendto
WSACleanup
WSAStartup
gethostname
connect
inet_addr
inet_ntoa
imagehlp
ImageDirectoryEntryToData
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
winmm
timeKillEvent
PlaySoundA
timeSetEvent
riched20
ord4
ord6
imm32
ImmGetContext
ImmReleaseContext
wininet
InternetConnectA
FtpFindFirstFileA
GopherCreateLocatorA
FtpCommandA
FtpOpenFileA
GopherGetAttributeA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
GopherFindFirstFileA
InternetCloseHandle
InternetFindNextFileA
GopherOpenFileA
HttpAddRequestHeadersA
InternetErrorDlg
FtpGetFileA
FtpPutFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
InternetQueryDataAvailable
InternetSetCookieA
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetSetOptionA
InternetGetCookieA
InternetOpenUrlA
HttpOpenRequestA
HttpQueryInfoA
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 599KB - Virtual size: 599KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HookSec Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ