Static task
static1
Behavioral task
behavioral1
Sample
c480eb11f44ddbce2cc3138e27f5c447403883a288dedd91262379bd35ffdfce.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c480eb11f44ddbce2cc3138e27f5c447403883a288dedd91262379bd35ffdfce.exe
Resource
win10v2004-20230915-en
General
-
Target
c480eb11f44ddbce2cc3138e27f5c447403883a288dedd91262379bd35ffdfce
-
Size
1.5MB
-
MD5
acb7314cec5251692e02e7bacf2b47ef
-
SHA1
cfe518ff369027b615524503e484f6aada11bc3e
-
SHA256
c480eb11f44ddbce2cc3138e27f5c447403883a288dedd91262379bd35ffdfce
-
SHA512
553ecb9c56cf7bbe0cc368619663c640fdfbcce916cd5128df17380eca7444b52248fec78e5b42fc7c07073542e36b8c0f68c9e12510efa2ce900e0b3714ea8d
-
SSDEEP
24576:Rv/tVfEBXP2rnJAp2xL94n10lxUdcA8U7lnFfga2RD/6y8K+rLAJpWXKUrDVHQNw:1lVkyn6p2xL94n10zCK2DVwq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c480eb11f44ddbce2cc3138e27f5c447403883a288dedd91262379bd35ffdfce
Files
-
c480eb11f44ddbce2cc3138e27f5c447403883a288dedd91262379bd35ffdfce.exe windows:4 windows x86
c0b4dfed479c697122094cb402916b43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
IsBadReadPtr
GetFileType
SetStdHandle
HeapSize
HeapReAlloc
ExitThread
TerminateProcess
GetACP
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
GetCurrentDirectoryA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
GetDiskFreeSpaceA
GetFileTime
GetTempFileNameA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
LockResource
FormatMessageA
WideCharToMultiByte
GetVersion
GetVersionExA
FreeLibrary
LocalSize
GlobalSize
GlobalFree
GetSystemDirectoryA
GetTempPathA
lstrcatA
CopyFileA
GetLocalTime
WinExec
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
FindResourceA
LoadResource
SizeofResource
ExitProcess
lstrcmpiA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CancelIo
InterlockedExchange
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemInfo
PostQueuedCompletionStatus
InitializeCriticalSection
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameA
WritePrivateProfileStringA
SetUnhandledExceptionFilter
DeleteFileA
LoadLibraryA
GetProcAddress
lstrcpyA
CreateDirectoryA
MoveFileA
RemoveDirectoryA
ReadFile
SetFilePointer
WriteFile
CreateFileA
GetFileSize
FindFirstFileA
FindNextFileA
FindClose
lstrcpynA
LocalAlloc
LocalFree
GetLogicalDriveStringsA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetFileAttributesA
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount
VirtualAlloc
VirtualFree
Sleep
CreateThread
ResumeThread
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
CreateEventA
InterlockedDecrement
InterlockedIncrement
lstrlenA
MultiByteToWideChar
GetLastError
UnhandledExceptionFilter
user32
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
IsWindow
IsIconic
GetClipboardData
DrawTextA
GetMenuState
ShowScrollBar
GetSysColorBrush
MessageBoxA
DispatchMessageA
UnregisterClassA
HideCaret
ShowCaret
DrawIconEx
IntersectRect
CheckMenuRadioItem
SetClassLongA
FindWindowA
LoadBitmapA
SetForegroundWindow
GetSystemMenu
AppendMenuA
CheckMenuItem
MessageBeep
GetSystemMetrics
DrawEdge
RedrawWindow
GetDesktopWindow
SetScrollRange
GetScrollRange
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetFocus
DeleteMenu
GetMenuItemCount
EnableMenuItem
GetFocus
wsprintfA
GetTopWindow
SetWindowPos
IsWindowVisible
UpdateWindow
ScreenToClient
GetWindow
OpenClipboard
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
TranslateMessage
GetMessageA
LoadIconA
SendMessageA
EnableWindow
SetRect
DestroyMenu
DestroyCursor
DestroyIcon
GetWindowLongA
GetNextDlgTabItem
GetParent
SetCursor
InvalidateRect
GetActiveWindow
WindowFromPoint
ClientToScreen
PostMessageA
TrackPopupMenuEx
GetSubMenu
GetWindowRect
DrawFocusRect
InflateRect
CopyRect
GetClientRect
OffsetRect
FillRect
GetSysColor
ReleaseDC
GetDC
GetIconInfo
LoadImageA
PeekMessageA
MapWindowPoints
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
wvsprintfA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
LoadStringA
CharUpperA
IsZoomed
PostQuitMessage
ShowOwnedPopups
ValidateRect
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
LoadAcceleratorsA
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
SetScrollPos
GetDlgCtrlID
GetScrollPos
SendDlgItemMessageA
CharNextA
LoadMenuA
LoadCursorA
DefWindowProcA
GetClassInfoA
GetCursor
DrawFrameControl
SetRectEmpty
SetTimer
SetCapture
ReleaseCapture
PostThreadMessageA
GetKeyState
CopyAcceleratorTableA
GetNextDlgGroupItem
GetDCEx
LockWindowUpdate
SetParent
GetClassNameA
SetCursorPos
KillTimer
PtInRect
GetCursorPos
SystemParametersInfoA
CloseClipboard
SetClipboardData
EmptyClipboard
gdi32
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
CreateRectRgn
StretchDIBits
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
PtVisible
RectVisible
Escape
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
DPtoLP
GetTextMetricsA
GetCharWidthA
CreateFontA
LPtoDP
GetTextColor
GetBkColor
CreateDIBSection
GetTextExtentPoint32A
SetPixelV
StretchBlt
PtInRegion
CreateFontIndirectA
Rectangle
PlgBlt
FillRgn
CreatePolygonRgn
GetObjectA
GetPixel
CreateBitmap
SelectObject
RestoreDC
SaveDC
GetClipBox
CreatePen
SetBkMode
TextOutA
CreateDIBitmap
GetTextExtentPointA
CreateSolidBrush
ExtTextOutA
SetBkColor
SetTextColor
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
OffsetViewportOrgEx
DeleteObject
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
shell32
SHGetFileInfoA
DragFinish
ord71
DragQueryFileA
ShellExecuteExA
Shell_NotifyIconA
ExtractIconA
ShellExecuteA
comctl32
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_ReplaceIcon
_TrackMouseEvent
oledlg
ord8
ole32
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CoTaskMemFree
CoRevokeClassObject
CoGetClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
OleFlushClipboard
olepro32
ord253
oleaut32
SysStringLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
VariantClear
skinh
SkinH_SetAero
SkinH_AttachRes
shlwapi
SHAutoComplete
PathRemoveFileSpecA
ws2_32
inet_addr
listen
bind
ntohs
getsockname
accept
setsockopt
WSAEventSelect
WSACreateEvent
WSASocketA
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAIoctl
WSAGetLastError
WSARecv
WSASend
socket
connect
recv
htons
inet_ntoa
getpeername
select
__WSAFDIsSet
ioctlsocket
send
WSAStartup
gethostname
gethostbyname
WSACleanup
closesocket
WSACloseEvent
pdh
PdhOpenQueryA
PdhCollectQueryData
PdhAddCounterA
PdhCloseQuery
PdhGetFormattedCounterValue
avifil32
AVIFileExit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIFileRelease
AVIFileInit
AVIStreamRelease
msvfw32
ICCompressorFree
DrawDibOpen
ICDecompress
ICSeqCompressFrameStart
DrawDibDraw
ICSeqCompressFrameEnd
DrawDibClose
ICClose
ICOpen
ICSendMessage
winmm
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
PlaySoundA
sndPlaySoundA
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveInStart
waveOutWrite
waveInStop
waveInReset
waveInUnprepareHeader
waveInClose
waveOutReset
waveOutUnprepareHeader
waveOutClose
wininet
InternetGetLastResponseInfoA
FtpPutFileA
InternetConnectA
InternetSetStatusCallback
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
Sections
.text Size: 522KB - Virtual size: 522KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ