Static task
static1
Behavioral task
behavioral1
Sample
990f7c310560ed7da108a737074da2e193400b5ee8940655cfbbec7298ddbc31.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
990f7c310560ed7da108a737074da2e193400b5ee8940655cfbbec7298ddbc31.exe
Resource
win10v2004-20230915-en
General
-
Target
990f7c310560ed7da108a737074da2e193400b5ee8940655cfbbec7298ddbc31
-
Size
116KB
-
MD5
568fafaa70997812f79ec84a68ad9031
-
SHA1
d1f19620a49bfef9276d37a99cae97d1bc222596
-
SHA256
990f7c310560ed7da108a737074da2e193400b5ee8940655cfbbec7298ddbc31
-
SHA512
b29de958de0c0eae56b8abb1028a7874becd6083ab4b853f87ba4cb78873206c20a06cc09ce3c9af079c17923e1cd2600d1f5e5f3f6ab55a6e8db29220a97057
-
SSDEEP
1536:bBne4UXs0+jdat6JUyCOSN1Sdg9/9tsG+CfzqwPfZeGJbzlkw:lew0+jct6JHs9/9t9tWwPfnJbuw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 990f7c310560ed7da108a737074da2e193400b5ee8940655cfbbec7298ddbc31
Files
-
990f7c310560ed7da108a737074da2e193400b5ee8940655cfbbec7298ddbc31.exe windows:4 windows x86
a688f53e1492dbd7c9b52ced05331faa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
sensapi
IsNetworkAlive
libcurl
curl_easy_cleanup
curl_easy_strerror
curl_easy_perform
curl_easy_setopt
curl_easy_init
curl_slist_append
msvcp60
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
msvcrt
_onexit
__dllonexit
_vsnprintf
fflush
remove
_ftol
atof
ftell
memcmp
memset
malloc
free
_mbscmp
_iob
fprintf
strncpy
_strnicmp
??1type_info@@UAE@XZ
setlocale
exit
_CxxThrowException
??0exception@@QAE@ABV0@@Z
isalpha
sprintf
strcpy
strlen
strcat
fopen
fread
fseek
fclose
??2@YAPAXI@Z
isalnum
__CxxFrameHandler
_exit
_XcptFilter
_acmdln
__getmainargs
_setmbcp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_stat
printf
ws2_32
gethostbyname
inet_addr
gethostbyaddr
WSACleanup
closesocket
connect
socket
htons
getservbyname
recv
gethostname
send
WSAStartup
mfc42
ord4078
ord1188
ord1146
ord2379
ord2863
ord1644
ord3663
ord3654
ord2584
ord4220
ord4277
ord5572
ord6877
ord6874
ord2614
ord4129
ord2764
ord6663
ord539
ord5683
ord4278
ord1601
ord2915
ord3092
ord6199
ord536
ord6270
ord2455
ord2438
ord6215
ord356
ord2770
ord2781
ord3178
ord926
ord924
ord535
ord668
ord5710
ord470
ord755
ord4160
ord3811
ord2820
ord2818
ord922
ord858
ord1105
ord1168
ord540
ord860
ord4234
ord324
ord3597
ord4425
ord4627
ord5277
ord2124
ord2446
ord5261
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord800
ord2514
ord2621
ord1134
ord537
ord641
ord2725
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord1576
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
kernel32
WideCharToMultiByte
GetStartupInfoA
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
GlobalMemoryStatusEx
GetDiskFreeSpaceExA
OutputDebugStringA
MultiByteToWideChar
Sleep
LoadLibraryA
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Module32First
Process32Next
CreateDirectoryA
CopyFileA
GetFileAttributesExA
FileTimeToSystemTime
DeleteFileA
GetComputerNameA
ReleaseMutex
CreateMutexA
GetLastError
GetSystemTime
GetDateFormatA
GetTimeFormatA
user32
CreatePopupMenu
EnableWindow
FindWindowA
GetSystemMetrics
LoadIconA
GetCursorPos
DrawIcon
AppendMenuA
SendMessageA
GetSystemMenu
IsIconic
GetClientRect
advapi32
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
shell32
ShellExecuteA
Shell_NotifyIconA
pdh
PdhCollectQueryData
PdhGetFormattedCounterValue
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
setupapi
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
shlwapi
PathIsDirectoryA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ