Static task
static1
Behavioral task
behavioral1
Sample
18f3d83836742f4f701d77f99f653ebdaf7d66c24fb4738bc90aa1bf7144cad6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
18f3d83836742f4f701d77f99f653ebdaf7d66c24fb4738bc90aa1bf7144cad6.exe
Resource
win10v2004-20230915-en
General
-
Target
18f3d83836742f4f701d77f99f653ebdaf7d66c24fb4738bc90aa1bf7144cad6
-
Size
388KB
-
MD5
e3bcfecf8862707ab57b88f94d1274af
-
SHA1
7469e2be97c0be3bf729874480e999a55f7a38cd
-
SHA256
18f3d83836742f4f701d77f99f653ebdaf7d66c24fb4738bc90aa1bf7144cad6
-
SHA512
f61f82d531a6111bc9688ae809fd82c733bc3071594caeee9cc9621e96c6ba030cc10cc784c573961865ad421ca8beae7cab1d191670889f478f3b66fdab12af
-
SSDEEP
6144:HzOFoEC8IhDqhkmeWMh260SgLRuC1VmV+k11wNimD94PnlWKL8e+8Tz:CuEC8EDKkmeWkWSgLRuj+k13LRTz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18f3d83836742f4f701d77f99f653ebdaf7d66c24fb4738bc90aa1bf7144cad6
Files
-
18f3d83836742f4f701d77f99f653ebdaf7d66c24fb4738bc90aa1bf7144cad6.exe windows:4 windows x86
0eb99b187d6fe22a27a1bcf5c211209e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadWritePtr
IsBadCodePtr
GetStdHandle
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetHandleCount
GetProfileStringA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
TerminateProcess
HeapFree
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentProcess
DuplicateHandle
GetCurrentDirectoryA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
LocalFree
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAlloc
CloseHandle
GetCurrentThread
lstrcmpA
GlobalFree
FindResourceA
LoadResource
LockResource
GetCurrentThreadId
lstrcmpiA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcpyA
lstrlenA
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleFileNameA
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
SetLastError
ExitProcess
Sleep
IsBadReadPtr
VirtualAlloc
FreeLibrary
VirtualFree
HeapReAlloc
HeapAlloc
LoadLibraryA
GetProcAddress
GetProcessHeap
CreateFileA
WriteFile
user32
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
CreateDialogIndirectParamA
EndDialog
PostQuitMessage
ShowOwnedPopups
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
DestroyCursor
SetRect
InflateRect
wvsprintfA
GetClassNameA
LoadStringA
GetSysColorBrush
SetTimer
KillTimer
WindowFromPoint
InvertRect
GetDCEx
LockWindowUpdate
InsertMenuA
GetMenuStringA
DestroyIcon
CharUpperA
FindWindowA
GetTabbedTextExtentA
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
DispatchMessageA
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
CreateWindowExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
IsZoomed
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
BringWindowToTop
IsWindowVisible
IsIconic
GetFocus
EqualRect
CopyRect
GetDlgItem
SetWindowLongA
GetKeyState
SetWindowPos
GetDlgCtrlID
GetMenuItemCount
GetSubMenu
GetMenuItemID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
GetMenu
LoadIconA
GetClassInfoA
LoadMenuA
DestroyMenu
SetFocus
GetActiveWindow
ShowWindow
IsWindow
GetDesktopWindow
GetWindow
PeekMessageA
PostMessageA
GetCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
wsprintfA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
MessageBoxA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
FillRect
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
UpdateWindow
EnableWindow
GetClientRect
GetMenuCheckMarkDimensions
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GetCursor
SetCursor
LoadCursorA
ReleaseCapture
SetCapture
PtInRect
GetDC
ReleaseDC
DrawEdge
GetSystemMetrics
InvalidateRect
LoadBitmapA
GetMenuState
ModifyMenuA
DefWindowProcA
SetMenuItemBitmaps
SetWindowsHookExA
gdi32
SetStretchBltMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
DeleteObject
CreateRectRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
SetROP2
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
CreateBitmap
GetTextExtentPoint32A
GetTextMetricsA
StretchDIBits
GetCharWidthA
CreateFontA
PatBlt
Rectangle
DPtoLP
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateFontIndirectA
LPtoDP
GetBkColor
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
SetPolyFillMode
SetBkMode
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
SetPixelV
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreatePolygonRgn
CreateSolidBrush
CreateDIBitmap
GetTextExtentPointA
FillRgn
comdlg32
GetFileTitleA
PrintDlgA
ChooseColorA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueExA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
shell32
SHGetFileInfoA
DragQueryFileA
DragFinish
ExtractIconA
comctl32
ord17
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ