Static task
static1
Behavioral task
behavioral1
Sample
f1f4080d7840020a0bfe1bb59b96bf06c15d9f992e246ffd5938d8ee00f87852.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f1f4080d7840020a0bfe1bb59b96bf06c15d9f992e246ffd5938d8ee00f87852.exe
Resource
win10v2004-20230915-en
General
-
Target
f1f4080d7840020a0bfe1bb59b96bf06c15d9f992e246ffd5938d8ee00f87852
-
Size
784KB
-
MD5
1c6149bb1621a43442f1afd52cbefb42
-
SHA1
93aebdc810e4a03a39708cc35cad25069a68cb61
-
SHA256
f1f4080d7840020a0bfe1bb59b96bf06c15d9f992e246ffd5938d8ee00f87852
-
SHA512
09a792683f3bef89501d7adcdae642f31a4a86eeb61b082a3f2f955e9abdae7878bf814275736a25345cf01271e0d987fd2b4c4a0f6156607ff7f31e8af05110
-
SSDEEP
24576:cyIPDRXa5HW2snESUI5PSwx0hg+wB69oFD1i0:jH1eES38I0hGQCFD15
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1f4080d7840020a0bfe1bb59b96bf06c15d9f992e246ffd5938d8ee00f87852
Files
-
f1f4080d7840020a0bfe1bb59b96bf06c15d9f992e246ffd5938d8ee00f87852.exe windows:4 windows x86
6b0ef741c0cba0368132192d5641ff58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetCurrentProcessId
SetEvent
GetLocalTime
ResetEvent
SetFileAttributesW
DeleteFileW
MoveFileW
WaitForMultipleObjects
TerminateThread
GetTickCount
GetCurrentThread
SetThreadPriority
GetSystemDirectoryW
LocalAlloc
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
CreateFileA
SetStdHandle
GetLocaleInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
GetSystemDefaultLangID
GetStringTypeW
GetStringTypeA
WriteFile
EnumSystemLocalesA
GetUserDefaultLCID
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsValidCodePage
GetOEMCP
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoW
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
Sleep
FreeResource
UnmapViewOfFile
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
VirtualQuery
GetModuleFileNameW
InterlockedDecrement
GlobalUnlock
CreateFileW
GlobalFree
InterlockedIncrement
GetFileSize
LeaveCriticalSection
SetLastError
ReadFile
EnterCriticalSection
MultiByteToWideChar
GetModuleFileNameA
InitializeCriticalSection
GetCommandLineW
FreeLibrary
FlushInstructionCache
GetCurrentProcess
lstrcmpiW
WideCharToMultiByte
GetCurrentThreadId
LoadLibraryW
lstrlenW
CreateFileMappingW
DeleteCriticalSection
MapViewOfFileEx
CreateEventW
lstrlenA
CreateMutexW
GlobalAlloc
LoadLibraryExW
GlobalLock
GetModuleHandleW
GetProcAddress
GetVersionExW
GetLastError
CreateDirectoryW
IsValidLocale
GetFileAttributesW
GetTempPathW
RaiseException
CloseHandle
GetExitCodeProcess
WaitForSingleObject
GetStdHandle
CreateProcessW
user32
GetActiveWindow
BringWindowToTop
LoadIconW
DrawTextW
UnregisterClassA
LoadImageW
CreateWindowExW
SetTimer
SetWindowTextW
GetDesktopWindow
UpdateWindow
KillTimer
DestroyWindow
OffsetRect
PeekMessageW
FindWindowExW
DrawFrameControl
SetRectEmpty
PostMessageW
ClientToScreen
GetDC
UpdateLayeredWindow
GetClientRect
LoadCursorW
EqualRect
DefWindowProcW
SetWindowLongW
DrawIconEx
InvalidateRect
GetClassInfoExW
ReleaseDC
InflateRect
BeginPaint
EndPaint
RegisterClassExW
GetDlgCtrlID
SetCapture
SetFocus
GetScrollPos
WindowFromPoint
CopyRect
PostThreadMessageW
ReleaseCapture
SetForegroundWindow
IsDialogMessageW
GetMonitorInfoW
SetWindowPos
GetParent
MonitorFromWindow
SetActiveWindow
SetCursor
ShowWindow
AttachThreadInput
IsChild
MoveWindow
LoadBitmapW
SetRect
SystemParametersInfoW
IsWindowVisible
GetFocus
GetDlgItem
GetWindowRect
SendMessageW
GetWindow
PtInRect
GetForegroundWindow
MapWindowPoints
GetWindowThreadProcessId
GetKeyState
SetWindowRgn
DispatchMessageW
GetWindowLongW
TranslateMessage
DestroyIcon
GetMessageW
EnableWindow
GetNextDlgTabItem
CallWindowProcW
CharNextW
IsWindow
IsWindowEnabled
gdi32
SetBkColor
SaveDC
MoveToEx
LineTo
CreatePen
SelectObject
DeleteDC
CreateFontIndirectW
GetObjectW
RoundRect
GetStockObject
SetBkMode
GetClipRgn
SelectClipRgn
SetTextColor
OffsetRgn
TextOutW
GetBitmapBits
RestoreDC
BitBlt
CreateRectRgnIndirect
CreateDIBSection
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateCompatibleDC
GetTextColor
CreateBitmap
CombineRgn
RectInRegion
StretchBlt
CreateRectRgn
SetStretchBltMode
Rectangle
GetCurrentObject
ExtTextOutW
SetBitmapBits
DeleteObject
SetViewportOrgEx
advapi32
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegEnumKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExW
shell32
ShellExecuteW
CommandLineToArgvW
ole32
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CreateStreamOnHGlobal
oleaut32
VarUI4FromStr
shlwapi
StrToIntW
PathAddBackslashW
StrToIntA
comctl32
InitCommonControlsEx
_TrackMouseEvent
msimg32
AlphaBlend
Sections
.text Size: 380KB - Virtual size: 378KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 336KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ