Static task
static1
Behavioral task
behavioral1
Sample
1b4596f0167291dd4c30f79b76709fddef9aae3aca704261a0efc50a95e580e5.exe
Resource
win7-20230831-en
General
-
Target
1b4596f0167291dd4c30f79b76709fddef9aae3aca704261a0efc50a95e580e5
-
Size
5.0MB
-
MD5
b3adc6cb0067b82c1867babbd87fecf5
-
SHA1
75c936c46bff796ec38b09bee28def86edc067e3
-
SHA256
1b4596f0167291dd4c30f79b76709fddef9aae3aca704261a0efc50a95e580e5
-
SHA512
661c78b2f2a33e1b070cf3e7125ed1f4e57406d85dc0289f75dca1fe45f46ac36e781b7eda06e2cf58aa4983d0ae12d7d692e0bf4b83fa3ac3ce4bb77482fee0
-
SSDEEP
98304:DsiUJNGRJKK2Ha9bP29kFJWnmIGsjX8g1asQ:gzNGjfemIpD8gMs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b4596f0167291dd4c30f79b76709fddef9aae3aca704261a0efc50a95e580e5
Files
-
1b4596f0167291dd4c30f79b76709fddef9aae3aca704261a0efc50a95e580e5.exe windows:5 windows x86
9effe9b8dd75e9c30d88b9cd20fc597b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
VirtualAlloc
SetLastError
VirtualProtect
IsBadReadPtr
HeapAlloc
GetThreadLocale
lstrlenA
Sleep
InterlockedIncrement
InterlockedDecrement
GetLastError
VirtualFree
FreeLibrary
HeapFree
GetProcAddress
OpenEventA
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
DeactivateActCtx
ActivateActCtx
SetEnvironmentVariableA
CreateFileW
GetTimeZoneInformation
EnumSystemLocalesA
IsValidLocale
GetConsoleMode
GetConsoleCP
LCMapStringW
CompareStringW
GetStringTypeW
HeapQueryInformation
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
SetConsoleCtrlHandler
FatalAppExitA
GetLocaleInfoW
IsValidCodePage
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetStdHandle
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
GetSystemTimeAsFileTime
ExitProcess
VirtualQuery
GetSystemInfo
ExitThread
CreateThread
HeapValidate
GetStartupInfoW
HeapSetInformation
GetCommandLineA
EncodePointer
DecodePointer
RaiseException
RtlUnwind
LocalLock
LocalUnlock
WaitForMultipleObjects
ReleaseMutex
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
InitializeCriticalSectionAndSpinCount
ResetEvent
PulseEvent
SearchPathA
GetTickCount
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
FindResourceExW
FileTimeToSystemTime
GetCurrentDirectoryA
SetFileAttributesA
LocalFileTimeToFileTime
GetFileAttributesExA
GetFileSizeEx
GetShortPathNameA
lstrcmpiA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetACP
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrcpyA
GetCurrentThread
GetLocaleInfoA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetProfileIntA
GetAtomNameA
lstrlenW
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
CreateEventA
SetEvent
WaitForSingleObject
CloseHandle
GlobalFlags
GlobalFree
lstrcmpA
GetModuleFileNameA
SetErrorMode
MulDiv
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
SuspendThread
ResumeThread
GetThreadPriority
SetThreadPriority
CompareStringA
LoadLibraryW
GetModuleHandleA
GetVersionExA
FindResourceA
FreeResource
lstrcmpW
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
MultiByteToWideChar
GlobalLock
GlobalUnlock
GlobalGetAtomNameA
GlobalAddAtomA
GetCurrentProcessId
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryA
user32
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
ExcludeUpdateRgn
WindowFromDC
LoadBitmapA
GetSysColorBrush
PostQuitMessage
GetCursorPos
FillRect
DestroyCursor
SetRectEmpty
GetSystemMetrics
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
OpenIcon
CloseWindow
LoadCursorW
LoadCursorA
PostThreadMessageA
NotifyWinEvent
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
FindWindowExA
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
SetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
GetMenuCheckMarkDimensions
DrawTextA
SetMenuItemBitmaps
RegisterWindowMessageA
MessageBoxA
GetClassInfoExA
RegisterClassA
LoadMenuIndirectA
SendDlgItemMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
DispatchMessageA
GetFocus
SetActiveWindow
ScreenToClient
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetWindowRect
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetClassInfoA
LoadImageA
DestroyIcon
GetMenuBarInfo
GetLastActivePopup
GetClassNameA
GetSysColor
EqualRect
GetDlgItem
GetDlgCtrlID
GetKeyState
UnpackDDElParam
ReuseDDElParam
WinHelpA
SetMenuContextHelpId
GetMenuContextHelpId
CheckMenuRadioItem
RealChildWindowFromPoint
SetMenu
LoadIconW
BringWindowToTop
MsgWaitForMultipleObjectsEx
DefFrameProcA
IsWindowUnicode
GetMessageW
LoadMenuA
DestroyMenu
SetFocus
GetWindowThreadProcessId
GetActiveWindow
ShowWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
EnableWindow
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
TabbedTextOutA
DrawTextExA
GetTabbedTextExtentA
GrayStringA
ScrollDC
CreateMenu
CreatePopupMenu
DeleteMenu
AppendMenuA
CheckMenuItem
EnableMenuItem
SetMenuDefaultItem
GetMenuDefaultItem
GetMenuState
GetMenuStringA
GetMenuItemInfoA
PostMessageA
MapDialogRect
CreateWindowExA
GetParent
GetMenuItemCount
GetSubMenu
GetMenuItemID
AdjustWindowRectEx
RedrawWindow
SetWindowPos
SetMenuItemInfoA
InsertMenuA
InsertMenuItemA
ModifyMenuA
RemoveMenu
LoadBitmapW
LoadMenuW
DispatchMessageW
SubtractRect
UnionRect
IntersectRect
InflateRect
SetRect
TranslateMDISysAccel
TranslateAcceleratorA
GetMenu
SendMessageA
IsMenu
IsWindow
DefMDIChildProcA
SetWindowLongA
GetWindowLongA
GetClientRect
TranslateMessage
GetMessageA
LoadAcceleratorsW
CreateDialogIndirectParamA
EndDialog
GetAsyncKeyState
SystemParametersInfoA
GetKeyNameTextA
MapVirtualKeyA
EnumDisplayMonitors
SetLayeredWindowAttributes
GetClipboardFormatNameA
CharUpperA
PtInRect
InSendMessage
IsRectEmpty
CopyAcceleratorTableA
GetTabbedTextExtentW
OffsetRect
MonitorFromPoint
DrawIconEx
UpdateLayeredWindow
DestroyAcceleratorTable
SetClassLongA
SetCursorPos
UnregisterClassA
GetDialogBaseUnits
MessageBeep
CreateAcceleratorTableA
ToAsciiEx
EnumChildWindows
MapVirtualKeyExA
IsCharLowerA
RegisterClipboardFormatA
GetDoubleClickTime
CopyIcon
EmptyClipboard
CloseClipboard
SetClipboardData
LoadImageW
CharUpperBuffA
WaitMessage
IsClipboardFormatAvailable
CopyImage
GetIconInfo
GetKeyboardState
LoadIconA
GetKeyboardLayout
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
GetCharWidthA
CreateFontA
GetObjectType
GetStockObject
CreateDCA
UnrealizeObject
CreatePen
CreatePenIndirect
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateBrushIndirect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontIndirectA
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateICA
GetDeviceCaps
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
GetNearestColor
RealizePalette
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
FloodFill
SelectObject
TextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
GetTextMetricsA
GetTextCharacterExtra
GetFontLanguageInfo
GetCharacterPlacementA
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
GetGlyphOutlineA
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatA
GetCharWidthFloatA
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
CreateDIBSection
CopyMetaFileA
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
StretchDIBits
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
ExtTextOutA
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
ExtFloodFill
SetDIBColorTable
CreateMetaFileA
GetDIBits
DeleteMetaFile
GetSystemPaletteEntries
EnumFontFamiliesExA
GetTextExtentPoint32W
GetTextExtentPointA
CreateDIBitmap
GetTextCharsetInfo
EnumFontFamiliesA
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
msimg32
AlphaBlend
GradientFill
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
GetJobA
OpenPrinterA
advapi32
OpenThreadToken
SetFileSecurityA
GetFileSecurityA
RegCloseKey
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegEnumValueA
RegEnumKeyExA
SetThreadToken
RevertToSelf
shell32
ExtractIconA
DragQueryFileA
DragAcceptFiles
SHGetFileInfoA
SHAppBarMessage
SHAddToRecentDocs
ShellExecuteExA
SHBrowseForFolderA
SHGetMalloc
DragFinish
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
comctl32
ImageList_AddMasked
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_Remove
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DrawEx
shlwapi
PathFindFileNameA
PathRemoveFileSpecW
PathRemoveExtensionA
PathIsUNCA
PathFindExtensionA
PathStripToRootA
ole32
StgIsStorageILockBytes
StgCreateDocfileOnILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
OleRun
CLSIDFromProgID
CLSIDFromString
StringFromGUID2
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
StgOpenStorage
OleInitialize
CreateFileMoniker
CoGetMalloc
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
CreateStreamOnHGlobal
OleQueryLinkFromData
OleQueryCreateFromData
DoDragDrop
OleFlushClipboard
PropVariantCopy
CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
OleGetIconOfClass
WriteClassStm
OleSaveToStream
CreateGenericComposite
CreateItemMoniker
OleIsRunning
GetRunningObjectTable
CoLockObjectExternal
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetClipboard
OleSetMenuDescriptor
CoRegisterClassObject
CoRevokeClassObject
CoUnmarshalInterface
CoMarshalInterface
CoReleaseMarshalData
GetClassFile
CoGetClassObject
CoRegisterMessageFilter
RevokeDragDrop
RegisterDragDrop
CoFreeUnusedLibraries
StgIsStorageFile
OleUninitialize
CoDisconnectObject
CoInitialize
CoCreateGuid
CoUninitialize
CoInitializeEx
CoCreateInstance
ReleaseStgMedium
CoTreatAsClass
OleSetClipboard
StgCreateDocfile
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleIsCurrentClipboard
oleaut32
SafeArrayGetElemsize
SysAllocString
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantCopy
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayGetDim
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDec
VarDecFromStr
VarDateFromStr
VarBstrFromDate
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
SystemTimeToVariantTime
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
VariantInit
SafeArrayAllocDescriptor
VariantClear
VariantChangeType
oledlg
ord4
ord9
ord5
ord6
ord7
ord3
ord8
gdiplus
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipGetImageGraphicsContext
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipAlloc
GdipCloneImage
GdipFree
GdipDisposeImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
GdipCreateBitmapFromStreamICM
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 610KB - Virtual size: 610KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 322KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 226KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ