Static task
static1
Behavioral task
behavioral1
Sample
63b6fa8bf8f8fe40d80f74052438f21071872220086bd3813bb31fee4a9e56ec.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
63b6fa8bf8f8fe40d80f74052438f21071872220086bd3813bb31fee4a9e56ec.exe
Resource
win10v2004-20230915-en
General
-
Target
63b6fa8bf8f8fe40d80f74052438f21071872220086bd3813bb31fee4a9e56ec
-
Size
287KB
-
MD5
835c2ebd7e52c4c569d1eab0b57b77a7
-
SHA1
52a163fbe6062d054c27906ed24a6f29af39ba2b
-
SHA256
63b6fa8bf8f8fe40d80f74052438f21071872220086bd3813bb31fee4a9e56ec
-
SHA512
b6fefcc303e93c02ee011fb25ae397fa070674e5c4246d0c22af2eb1cd069653dcd67822139f8affbca4f5503e655e36f23421dc6b6a40f599e89ff020ef4a0f
-
SSDEEP
3072:IR+M8g9tcaBcA+hyiiv00xE4/zCd8Kp05HuB/WTIDylH8V2eHbPAHDQrzrnkGJsF:IRV5vY0NGpw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63b6fa8bf8f8fe40d80f74052438f21071872220086bd3813bb31fee4a9e56ec
Files
-
63b6fa8bf8f8fe40d80f74052438f21071872220086bd3813bb31fee4a9e56ec.exe windows:5 windows x64
8b288786866a5a536b0a40f44a797241
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
DrawTextW
UpdateWindow
GetDlgItemTextW
InflateRect
SetDlgItemTextW
SetRect
GetDC
CreateWindowExW
ReleaseDC
EnableWindow
TranslateMessage
TranslateAcceleratorW
SetProcessDefaultLayout
RegisterWindowMessageW
RegisterClassExW
PostQuitMessage
MoveWindow
MonitorFromRect
LoadImageW
LoadAcceleratorsW
IsDialogMessageW
IsClipboardFormatAvailable
InvalidateRect
IntersectRect
GetMonitorInfoW
GetWindowRect
GetSystemMetrics
GetMessageW
GetMenu
DispatchMessageW
DestroyAcceleratorTable
DefWindowProcW
CheckMenuItem
CallWindowProcW
WinHelpW
ShowWindow
SetWindowTextW
SetWindowLongPtrW
SetFocus
SetDlgItemInt
SetCursor
SendMessageW
SendDlgItemMessageW
PostMessageW
MessageBoxW
LoadStringW
LoadIconW
LoadCursorW
GetWindowTextLengthW
GetWindowTextW
GetDlgItemInt
GetDlgItem
GetClientRect
EndDialog
EnableMenuItem
DialogBoxParamW
DestroyWindow
gdi32
StartPage
StartDocW
SetMapMode
SelectObject
Rectangle
GetTextMetricsW
GetTextExtentPoint32W
GetStockObject
GetDeviceCaps
EndPage
EndDoc
DeleteDC
AbortDoc
DeleteObject
CreateFontIndirectW
TextOutW
comctl32
CreateStatusWindowW
comdlg32
PrintDlgW
ChooseFontW
FindTextW
GetOpenFileNameW
GetSaveFileNameW
ReplaceTextW
PageSetupDlgW
GetFileTitleW
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
RegCreateKeyExW
RegCloseKey
IsTextUnicode
shell32
DragQueryFileW
DragFinish
DragAcceptFiles
ShellExecuteW
ShellAboutW
SHAddToRecentDocs
msvcrt
__lconv_init
signal
_wcmdln
__winitenv
_initterm
_fpreset
_cexit
exit
__set_app_type
memset
wcscat
wcscmp
wcscpy
wcsrchr
_vsnwprintf
_assert
iswctype
wcslen
wcsncmp
wcsncpy
_wcsnicmp
towupper
memcpy
malloc
__setusermatherr
_amsg_exit
__wgetmainargs
kernel32
LocalUnlock
LocalLock
LocalFree
HeapFree
HeapAlloc
GetProcessHeap
GetProcAddress
GetLocalTime
GetLastError
GetFileAttributesW
GetDateFormatW
CreateFileW
CloseHandle
TlsGetValue
GetStartupInfoW
SetUnhandledExceptionFilter
Sleep
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTimeFormatW
GetTickCount
QueryPerformanceCounter
GetFullPathNameW
GlobalFree
lstrlenW
GetUserDefaultUILanguage
CreateThread
LocalAlloc
MulDiv
GetUserDefaultLangID
CreateFileMappingW
GetFileSize
LocalReAlloc
MapViewOfFile
UnmapViewOfFile
WriteFile
MultiByteToWideChar
FormatMessageW
WideCharToMultiByte
GetModuleHandleA
LoadLibraryW
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetModuleFileNameW
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ