Static task
static1
Behavioral task
behavioral1
Sample
b33a384adfc32f7457750c363232d26f792df3feee0217e9dde6ff057a5b00ac.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b33a384adfc32f7457750c363232d26f792df3feee0217e9dde6ff057a5b00ac.exe
Resource
win10v2004-20230915-en
General
-
Target
b33a384adfc32f7457750c363232d26f792df3feee0217e9dde6ff057a5b00ac
-
Size
974KB
-
MD5
cc7e359406249bc4f9eeb65204b9f4c2
-
SHA1
7eea21654b598dc5ce7e9f85d938b2081a0ffdf2
-
SHA256
b33a384adfc32f7457750c363232d26f792df3feee0217e9dde6ff057a5b00ac
-
SHA512
0332103e27820c162dbc409c021d59f1a411b3a5d1eb0b6ae905d83007251070d89a02739f1202605932fc5e19fa97756cdca42a5654bf7802ddeb3e1ec30dd9
-
SSDEEP
12288:n0umvL019d9qe+cVy606yzyc+sFNoJpaz/g/J/vV:n0umvId9qeJyZv+sFCaz/g/J/N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b33a384adfc32f7457750c363232d26f792df3feee0217e9dde6ff057a5b00ac
Files
-
b33a384adfc32f7457750c363232d26f792df3feee0217e9dde6ff057a5b00ac.exe windows:5 windows x86
d8ff56dd95ec84bf7a276433338ba8b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_itow
free
memmove
realloc
malloc
_vsnwprintf
_except_handler3
advapi32
RegDeleteValueW
RegQueryValueW
RegEnumKeyExW
GetUserNameW
RegNotifyChangeKeyValue
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegSetValueW
RegEnumValueW
RegEnumKeyW
kernel32
GetSystemDirectoryW
CreateThread
CreateJobObjectW
ExitProcess
SetProcessShutdownParameters
ReleaseMutex
CreateMutexW
SetPriorityClass
GetCurrentProcess
GetStartupInfoW
GetCommandLineW
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
ResetEvent
LoadLibraryExA
CompareFileTime
GetSystemTimeAsFileTime
SetThreadPriority
GetCurrentThreadId
GetThreadPriority
GetCurrentThread
GetUserDefaultLangID
Sleep
GetBinaryTypeW
GetModuleHandleExW
SystemTimeToFileTime
GetLocalTime
GetCurrentProcessId
GetEnvironmentVariableW
UnregisterWait
GlobalGetAtomNameW
GetFileAttributesW
MoveFileW
LoadLibraryExW
FindClose
FindNextFileW
FindFirstFileW
lstrcmpiA
SetEvent
RegisterWaitForSingleObject
AssignProcessToJobObject
GetTimeFormatW
FlushInstructionCache
RaiseException
lstrcpynW
GetSystemWindowsDirectoryW
SetLastError
GetProcessHeap
HeapFree
HeapReAlloc
HeapSize
HeapAlloc
GetUserDefaultLCID
ReadProcessMemory
OpenProcess
InterlockedCompareExchange
LoadLibraryA
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualFree
VirtualAlloc
ResumeThread
TerminateProcess
TerminateThread
GetSystemDefaultLCID
GetLocaleInfoW
CreateEventW
OpenEventW
WaitForSingleObject
DelayLoadFailureHook
GetTickCount
ExpandEnvironmentStringsW
GetModuleFileNameW
GetPrivateProfileStringW
lstrcmpiW
CreateProcessW
FreeLibrary
LocalAlloc
CreateFileW
DeviceIoControl
LocalFree
GetWindowsDirectoryW
GetModuleHandleA
GetQueuedCompletionStatus
CreateIoCompletionPort
SetInformationJobObject
CloseHandle
LoadLibraryW
GetModuleHandleW
InterlockedIncrement
ActivateActCtx
DeactivateActCtx
GetFileAttributesExW
GetProcAddress
HeapDestroy
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLongPathNameW
GetLastError
lstrlenW
InterlockedDecrement
GlobalAlloc
InterlockedExchange
GetVersionExA
GlobalFree
MulDiv
GetProcessTimes
lstrcpyW
GetDateFormatW
gdi32
CombineRgn
GetStockObject
CreatePatternBrush
OffsetViewportOrgEx
GetLayout
CreateDIBSection
GetTextExtentPoint32W
StretchBlt
CreateRectRgnIndirect
CreateRectRgn
GetClipRgn
IntersectClipRect
GetViewportOrgEx
SetViewportOrgEx
SelectClipRgn
PatBlt
GetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
OffsetWindowOrgEx
DeleteDC
SetBkColor
BitBlt
ExtTextOutW
GetTextExtentPointW
GetClipBox
GetObjectW
SetTextColor
SetBkMode
CreateFontIndirectW
DeleteObject
GetTextMetricsW
SelectObject
GetDeviceCaps
TranslateCharsetInfo
SetStretchBltMode
user32
TileWindows
GetSystemMetrics
SystemParametersInfoW
GetSysColorBrush
AllowSetForegroundWindow
LoadMenuW
GetSubMenu
RemoveMenu
SetParent
GetMessagePos
CheckDlgButton
EnableWindow
GetDlgItemInt
SetDlgItemInt
CopyIcon
AdjustWindowRectEx
DrawFocusRect
DrawEdge
ExitWindowsEx
WindowFromPoint
SetRect
AppendMenuW
LoadAcceleratorsW
LoadBitmapW
SendNotifyMessageW
SetWindowPlacement
CheckMenuItem
EndDialog
SendDlgItemMessageW
MessageBeep
GetActiveWindow
PostQuitMessage
MoveWindow
GetDlgItem
RemovePropW
GetClassNameW
GetDCEx
SetCursorPos
ChildWindowFromPoint
ChangeDisplaySettingsW
RegisterHotKey
UnregisterHotKey
SetCursor
SendMessageTimeoutW
GetWindowPlacement
LoadImageW
SetWindowRgn
IntersectRect
OffsetRect
EnumDisplayMonitors
RedrawWindow
SubtractRect
TranslateAcceleratorW
WaitMessage
InflateRect
CallWindowProcW
GetDlgCtrlID
SetCapture
FindWindowW
GetShellWindow
GetDoubleClickTime
CreatePopupMenu
GetMenuDefaultItem
EnumChildWindows
GetWindowLongW
SendMessageW
RegisterWindowMessageW
GetKeyState
CharNextW
DestroyMenu
CopyRect
MonitorFromRect
MonitorFromPoint
RegisterClassW
SetPropW
GetWindowLongA
SetWindowLongW
FillRect
GetCursorPos
MessageBoxW
LoadStringW
ReleaseDC
GetDC
EnumDisplaySettingsExW
EnumDisplayDevicesW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
PtInRect
BeginPaint
EndPaint
SetWindowTextW
GetAsyncKeyState
InvalidateRect
GetWindow
ShowWindowAsync
TrackPopupMenuEx
UpdateWindow
DestroyIcon
IsRectEmpty
SetActiveWindow
GetSysColor
DrawTextW
IsHungAppWindow
SetTimer
GetMenuItemID
TrackPopupMenu
EndTask
SendMessageCallbackW
GetClassLongW
LoadIconW
OpenInputDesktop
CloseDesktop
SetScrollPos
ShowWindow
BringWindowToTop
GetDesktopWindow
CascadeWindows
CharUpperBuffW
SwitchToThisWindow
InternalGetWindowText
GetScrollInfo
GetMenuItemCount
CreateWindowExW
DialogBoxParamW
MsgWaitForMultipleObjects
CharNextA
RegisterClipboardFormatW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
PrintWindow
SetClassLongW
GetPropW
GetNextDlgGroupItem
GetNextDlgTabItem
ChildWindowFromPointEx
IsChild
NotifyWinEvent
TrackMouseEvent
GetCapture
GetAncestor
CharUpperW
SetWindowLongA
DrawCaption
ModifyMenuW
InsertMenuW
IsWindowEnabled
GetMenuState
LoadCursorW
GetParent
IsDlgButtonChecked
DestroyWindow
EnumWindows
IsWindowVisible
GetClientRect
UnionRect
EqualRect
GetWindowThreadProcessId
GetForegroundWindow
KillTimer
GetClassInfoExW
DefWindowProcW
RegisterClassExW
GetIconInfo
SetScrollInfo
GetLastActivePopup
SetForegroundWindow
IsWindow
GetSystemMenu
IsIconic
IsZoomed
EnableMenuItem
SetMenuDefaultItem
MonitorFromWindow
GetMonitorInfoW
GetWindowInfo
GetFocus
SetFocus
MapWindowPoints
ScreenToClient
ClientToScreen
GetWindowRect
SetWindowPos
DeleteMenu
GetMenuItemInfoW
SetMenuItemInfoW
ntdll
RtlNtStatusToDosError
NtQueryInformationProcess
shlwapi
StrCpyNW
ord215
ord476
StrRetToBufW
StrRetToStrW
ord154
ord439
ord156
ord171
ord178
ord177
ord193
SHQueryValueExW
PathIsNetworkPathW
ord513
AssocCreate
ord512
StrCatW
StrCpyW
ord413
ord219
ord175
ord164
ord172
SHGetValueW
ord437
ord552
StrCmpNIW
PathRemoveBlanksW
PathRemoveArgsW
PathFindFileNameW
StrStrIW
PathGetArgsW
ord554
StrToIntW
SHRegGetBoolUSValueW
SHRegWriteUSValueW
SHRegCloseUSKey
SHRegCreateUSKeyW
SHRegGetUSValueW
SHSetValueW
ord433
PathAppendW
ord460
ord194
PathQuoteSpacesW
ord244
SHSetThreadRef
SHCreateThreadRef
ord241
ord236
ord279
PathCombineW
ord192
ord204
ord509
SHStrDupW
PathIsPrefixW
PathParseIconLocationW
AssocQueryKeyW
ord16
AssocQueryStringW
StrCmpW
ord174
ord548
ord165
ord240
ord163
ord479
ord9
ord8
SHRegQueryUSValueW
SHRegOpenUSKeyW
SHRegSetUSValueW
PathIsDirectoryW
PathFileExistsW
PathGetDriveNumberW
ord10
StrChrW
PathFindExtensionW
ord260
ord292
PathRemoveFileSpecW
PathStripToRootW
ord250
ord478
ord184
SHOpenRegStream2W
ord212
ord213
ord158
StrDupW
SHDeleteValueW
StrCatBuffW
SHDeleteKeyW
StrCmpIW
ord467
ord346
wnsprintfW
ord225
ord197
ord278
StrCmpNW
ord237
ord199
ord176
shell32
SHGetSpecialFolderLocation
ord162
SHGetFolderPathW
ord67
ord72
ord90
ord181
ord727
ExtractIconExW
ord137
ord645
ord644
ord236
ord149
ord147
ord188
ord660
ord201
ord245
ord68
ord723
ord200
ord680
ord89
ord85
ord653
ShellExecuteExW
ord182
ord196
ord25
ord152
SHBindToParent
ord719
ord732
ord148
SHParseDisplayName
ord154
ord77
ord6
ord193
ord747
ord71
ord17
ord23
ord132
ord100
ord233
SHGetSpecialFolderPathW
ord195
ord155
ord241
ord134
ord22
SHChangeNotify
SHGetDesktopFolder
SHAddToRecentDocs
ord127
ord21
ord102
DuplicateIcon
ord202
ord82
ord244
ord54
ord161
ord91
ord254
ord60
SHUpdateRecycleBinIcon
SHGetFolderLocation
SHGetPathFromIDListA
ord711
ord731
ord4
ord733
ord190
ord64
ord61
SHGetPathFromIDListW
ord753
ord16
ord18
ord2
ole32
CoFreeUnusedLibraries
RegisterDragDrop
RevokeDragDrop
CreateBindCtx
OleUninitialize
CoInitializeEx
OleInitialize
CoTaskMemFree
CoRevokeClassObject
CoRegisterClassObject
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoUninitialize
DoDragDrop
oleaut32
SysAllocString
VariantClear
browseui
ord118
ord135
ord107
ord106
shdocvw
ord110
ord125
ord111
uxtheme
ord47
GetThemeBackgroundContentRect
GetThemeBool
GetThemePartSize
DrawThemeParentBackground
OpenThemeData
DrawThemeBackground
GetThemeTextExtent
DrawThemeText
CloseThemeData
SetWindowTheme
GetThemeMargins
GetThemeColor
GetThemeFont
GetThemeBackgroundRegion
GetThemeRect
IsAppThemed
Sections
.text Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 676KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ