Static task
static1
Behavioral task
behavioral1
Sample
5e2eef4f0f132ca4b17aca0f614160fa44a83ce9e662334e435618a63ba35bea.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5e2eef4f0f132ca4b17aca0f614160fa44a83ce9e662334e435618a63ba35bea.exe
Resource
win10v2004-20230915-en
General
-
Target
5e2eef4f0f132ca4b17aca0f614160fa44a83ce9e662334e435618a63ba35bea
-
Size
784KB
-
MD5
4404b458c769c9a1688939384d0d2f5d
-
SHA1
4f88a6ba4dde7075ab05551839d97545993c16c0
-
SHA256
5e2eef4f0f132ca4b17aca0f614160fa44a83ce9e662334e435618a63ba35bea
-
SHA512
7e6877b3375b45cb69d14425d94369bdbd068cb2e05e861ae43e02ee1dd15c499f2f5d2495b3daeedaeef51e236334671245dca031622af5918fb098dc7fd784
-
SSDEEP
12288:pTPmXqBoqmUy7Ye/d8l3U0OlRoysG5i6Jxe/R06ViK5Gr6sh5sK0u5tse:pTnSqmd/ul3U0GjYUxe3d/sgC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e2eef4f0f132ca4b17aca0f614160fa44a83ce9e662334e435618a63ba35bea
Files
-
5e2eef4f0f132ca4b17aca0f614160fa44a83ce9e662334e435618a63ba35bea.exe windows:4 windows x86
691dd5413c20ea8be4071ec4c6d194e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrcmpiW
WriteFile
SetEnvironmentVariableA
GetLocaleInfoW
SetConsoleCtrlHandler
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
IsBadCodePtr
IsBadReadPtr
GetDriveTypeA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCurrentThreadId
SetEvent
TerminateThread
DuplicateHandle
CreateEventA
CreateThread
SetLastError
TerminateProcess
WaitForMultipleObjects
PeekNamedPipe
GetLastError
GetTickCount
OpenMutexA
CreateMutexA
ReleaseMutex
GlobalAddAtomA
Sleep
CreateDirectoryA
GetCurrentProcess
lstrlenW
FreeResource
GetCPInfo
lstrcmpiA
GetVersion
SetCurrentDirectoryA
WaitForSingleObject
GetModuleHandleA
GetProcAddress
CreatePipe
GetStartupInfoA
CreateProcessA
CloseHandle
ReadFile
GlobalGetAtomNameA
GlobalDeleteAtom
MultiByteToWideChar
GetModuleFileNameA
lstrcatA
lstrlenA
GetTimeZoneInformation
IsBadWritePtr
VirtualFree
HeapCreate
WinExec
lstrcpyA
GetTempPathA
DeleteFileA
WritePrivateProfileSectionA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
WritePrivateProfileStringA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapDestroy
FatalAppExitA
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
QueryPerformanceCounter
HeapSize
ExitThread
GetFileType
SetStdHandle
HeapReAlloc
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
RtlUnwind
ExitProcess
LocalLock
LocalUnlock
GetCurrentDirectoryA
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
GetFileAttributesA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
SetErrorMode
SystemTimeToFileTime
GetOEMCP
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetPrivateProfileIntA
SuspendThread
ResumeThread
SetThreadPriority
GetShortPathNameA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
MoveFileA
lstrcmpW
GlobalFindAtomA
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
MulDiv
CopyFileA
GlobalFree
InterlockedDecrement
FindClose
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
user32
GetDC
ReleaseDC
IsMenu
DrawStateA
DestroyIcon
TabbedTextOutA
CreateIconIndirect
GetKeyState
GetFocus
UpdateWindow
DrawFrameControl
UnionRect
TranslateMessage
CharUpperW
CharUpperA
CharLowerW
CharLowerA
MessageBeep
FlashWindow
IsIconic
GetSystemMenu
DrawIcon
GetClassInfoA
GetWindow
GetWindowPlacement
IntersectRect
SetWindowPos
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
SetWindowPlacement
UnregisterClassA
RegisterClassA
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetMenu
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
TrackPopupMenu
TrackPopupMenuEx
ScrollWindow
MapWindowPoints
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
IsChild
SetFocus
SendDlgItemMessageA
SetPropA
GetClassNameA
GetClassInfoExA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetCapture
WinHelpA
GetMenuStringA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
ScrollWindowEx
GetWindowDC
BeginPaint
EndPaint
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
wsprintfA
EndDialog
CreateDialogIndirectParamA
ValidateRect
GetMessageA
GetKeyNameTextA
MapVirtualKeyA
FindWindowA
IsRectEmpty
SetWindowRgn
SetCapture
ReleaseCapture
SetRectEmpty
PostQuitMessage
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
GetDialogBaseUnits
CopyAcceleratorTableA
InvalidateRgn
TranslateAcceleratorA
SetMenu
BringWindowToTop
GetIconInfo
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
CharNextA
GetDCEx
LockWindowUpdate
WaitMessage
GetNextDlgGroupItem
IsClipboardFormatAvailable
GetTabbedTextExtentA
RegisterClipboardFormatA
SetParent
BroadcastSystemMessageA
MessageBoxA
GetDlgItem
GetMenuItemInfoA
GetSystemMetrics
SystemParametersInfoA
DrawIconEx
GrayStringA
DrawTextExA
DrawTextA
InsertMenuItemA
GetDesktopWindow
RemoveMenu
ModifyMenuA
InsertMenuA
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
DeleteMenu
CreatePopupMenu
CreateMenu
DrawEdge
GetSysColorBrush
SetRect
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
GetCursorPos
DestroyMenu
GetWindowThreadProcessId
EnumThreadWindows
LoadIconA
PostThreadMessageA
SetForegroundWindow
IsWindowVisible
LoadMenuA
GetSubMenu
LoadBitmapA
GetPropA
RemovePropA
SetWindowLongA
CopyIcon
IsWindow
GetMessagePos
KillTimer
SetTimer
ScreenToClient
PtInRect
LoadCursorA
LoadImageA
GetSysColor
PostMessageA
SetCursor
DestroyCursor
GetWindowLongA
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
FrameRect
FillRect
OffsetRect
CopyRect
InflateRect
gdi32
Rectangle
Ellipse
PatBlt
GetDeviceCaps
CreateHatchBrush
CreatePen
CreateDIBSection
CreateSolidBrush
GetTextExtentPoint32A
CreateFontIndirectA
GetObjectA
CreateCompatibleBitmap
GetPixel
SetPixel
CreateBitmap
CreateCompatibleDC
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
GetStockObject
DeleteObject
GetDCOrgEx
GetClipBox
CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32W
GetCurrentObject
GetBkMode
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
GetTextColor
GetRgnBox
GetTextMetricsA
GetBkColor
CreateFontA
GetCharWidthA
StretchDIBits
LPtoDP
CreateEllipticRgn
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
advapi32
RegSetValueA
SetFileSecurityA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
IsTextUnicode
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyA
GetFileSecurityA
shell32
ShellExecuteA
SHGetFileInfoA
ShellExecuteExA
DragFinish
DragQueryFileA
ExtractIconA
Shell_NotifyIconA
comctl32
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Draw
ImageList_Create
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetIconSize
ord17
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_GetImageInfo
ord13
ImageList_Read
ImageList_Write
ord14
ImageList_Destroy
ImageList_LoadImageA
ImageList_Merge
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_GetImageCount
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
UrlUnescapeA
PathRemoveExtensionA
oledlg
ord8
rasapi32
RasGetProjectionInfoA
RasGetErrorStringA
RasDialA
RasSetEntryPropertiesA
RasDeleteEntryA
RasHangUpA
skinh
SkinH_AttachEx
winmm
PlaySoundA
wininet
InternetQueryDataAvailable
FtpCreateDirectoryA
FtpRemoveDirectoryA
HttpOpenRequestA
InternetOpenUrlA
GopherOpenFileA
InternetConnectA
FtpFindFirstFileA
GopherCreateLocatorA
FtpCommandA
FtpOpenFileA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpDeleteFileA
GopherGetAttributeA
HttpSendRequestExA
FtpPutFileA
FtpGetFileA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetOptionExA
InternetSetCookieA
InternetGetCookieA
HttpEndRequestA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
GopherFindFirstFileA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetFindNextFileA
HttpQueryInfoA
HttpAddRequestHeadersA
InternetErrorDlg
FtpRenameFileA
iphlpapi
GetAdaptersInfo
ws2_32
gethostbyname
recvfrom
sendto
select
socket
closesocket
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
winspool.drv
GetJobA
DocumentPropertiesA
ClosePrinter
OpenPrinterA
comdlg32
FindTextA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ReplaceTextA
PageSetupDlgA
PrintDlgA
CommDlgExtendedError
ole32
CLSIDFromProgID
CreateStreamOnHGlobal
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CreateBindCtx
CoTreatAsClass
CoRevokeClassObject
CLSIDFromString
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoRegisterClassObject
OleInitialize
CoDisconnectObject
CoCreateInstance
StringFromGUID2
CoGetClassObject
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
ReadClassStg
OleSetClipboard
StgCreateDocfileOnILockBytes
OleUninitialize
OleRun
StringFromCLSID
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
oleaut32
LoadTypeLi
OleCreateFontIndirect
SafeArrayCreateVector
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarDateFromStr
SysReAllocStringLen
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 552KB - Virtual size: 552KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ