Static task
static1
Behavioral task
behavioral1
Sample
33265d4323b9da49b1d30eb5e58f619d13c8051eecf479c2ac18bf6ad85cec71.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
33265d4323b9da49b1d30eb5e58f619d13c8051eecf479c2ac18bf6ad85cec71.exe
Resource
win10v2004-20230915-en
General
-
Target
33265d4323b9da49b1d30eb5e58f619d13c8051eecf479c2ac18bf6ad85cec71
-
Size
135KB
-
MD5
163956e273a076f80a32e79f7878bb50
-
SHA1
f2882ed7e50531de602cf4d4efe3d0e1b01ff105
-
SHA256
33265d4323b9da49b1d30eb5e58f619d13c8051eecf479c2ac18bf6ad85cec71
-
SHA512
c636482b325525e8662f9d8808cbfa079ec066d946f3e312b083ca83d63a5c3fa8d057f51b8f726f4702e8395f8aa09ca57b896404d7e5dacf809db2117beeb5
-
SSDEEP
1536:TlWtp+21QFioJzHf9dWD11K7YYl/xXvVPQgijP0plDiHFxqoXsE:H3ioNHfCD1zYNdvWZjP0vDiHFxi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33265d4323b9da49b1d30eb5e58f619d13c8051eecf479c2ac18bf6ad85cec71
Files
-
33265d4323b9da49b1d30eb5e58f619d13c8051eecf479c2ac18bf6ad85cec71.exe windows:5 windows x86
b7bebedf3f254b3ddec370d6df020a18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
comctl32
CreateStatusWindowW
InitCommonControlsEx
shell32
ShellAboutW
user32
MessageBoxW
BeginPaint
CallWindowProcW
CheckDlgButton
CheckRadioButton
CreateWindowExW
DefWindowProcW
DestroyWindow
DialogBoxParamW
DispatchMessageW
EnableMenuItem
EnableWindow
EndDialog
EndPaint
KillTimer
GetDlgItem
GetMenu
GetMessageW
GetSubMenu
GetSysColor
GetSystemMetrics
GetWindowLongW
GetWindowRect
InvalidateRect
IsDlgButtonChecked
LoadAcceleratorsW
LoadCursorW
LoadIconW
LoadStringW
MoveWindow
PostQuitMessage
GetClientRect
CopyRect
MessageBoxA
LoadBitmapA
InflateRect
SendMessageA
OffsetRect
GetParent
DrawIconEx
SetCapture
ReleaseCapture
SetWindowLongA
RegisterClassExA
PtInRect
LoadCursorA
GetWindowLongA
DefWindowProcA
CreateWindowExA
FillRect
SetRect
ReleaseDC
IntersectRect
GetDC
WinHelpW
UpdateWindow
TranslateMessage
TranslateAcceleratorW
ShowWindow
SetWindowPos
SetWindowLongW
SetTimer
SendMessageW
RegisterClassW
PostMessageW
gdi32
SetBrushOrgEx
PatBlt
CreatePatternBrush
CreatePalette
CreateBitmap
SetTextColor
MoveToEx
LineTo
GetTextExtentPoint32A
SelectPalette
SelectClipRgn
RealizePalette
GetObjectA
GetClipRgn
FillRgn
CreateSolidBrush
CreateRectRgn
CombineRgn
SetPixel
GetPixel
ExcludeClipRect
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetBkColor
ExtTextOutA
StretchBlt
SelectObject
Rectangle
GetStockObject
CreatePen
msvcrt
??3@YAXPAX@Z
__lconv_init
signal
_onexit
__dllonexit
_unlock
_lock
calloc
_ftol
_wcmdln
__winitenv
_initterm
_fpreset
_cexit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__setusermatherr
malloc
memcpy
sqrt
fabs
abs
??2@YAPAXI@Z
rand
swprintf
wcscat
memset
srand
__CxxFrameHandler
kernel32
GetModuleHandleW
GetProcessHeap
GetTickCount
TlsGetValue
LeaveCriticalSection
InitializeCriticalSection
GetLastError
EnterCriticalSection
DeleteCriticalSection
LoadLibraryW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStartupInfoW
GetProcAddress
LoadLibraryA
GetVersion
FreeLibrary
lstrlenA
Sleep
GetModuleHandleA
WaitForSingleObject
ReleaseMutex
CreateMutexA
CloseHandle
lstrcpyW
HeapFree
HeapAlloc
GetModuleFileNameW
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ