Static task
static1
Behavioral task
behavioral1
Sample
e4afb17cdfe960b1cee6a61be5954384807cee32d9c4e5a5d948101b02b00c90.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e4afb17cdfe960b1cee6a61be5954384807cee32d9c4e5a5d948101b02b00c90.exe
Resource
win10v2004-20230915-en
General
-
Target
e4afb17cdfe960b1cee6a61be5954384807cee32d9c4e5a5d948101b02b00c90
-
Size
2.0MB
-
MD5
79f3be99b2a263b17050ac4d9a2a16af
-
SHA1
93243228ea8dda46656cdd07e4ff911ebb29b3d1
-
SHA256
e4afb17cdfe960b1cee6a61be5954384807cee32d9c4e5a5d948101b02b00c90
-
SHA512
fbc0a374e71668f8863d3860a9348dff22999d19fb78bf2ef830a2e8a8188a758b2eb3d6c53f2fb03c140417c1cbe70ccc96ffba66dd204014cb7088f252995b
-
SSDEEP
49152:NFlpPeRsoKPz63amzArwixkIXfqVfqkaNVUxAkxhyC8NJ08GvnLvdXG3:NZAbKPz6KmzRixkIEfq5NVUx7yC8P08Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4afb17cdfe960b1cee6a61be5954384807cee32d9c4e5a5d948101b02b00c90
Files
-
e4afb17cdfe960b1cee6a61be5954384807cee32d9c4e5a5d948101b02b00c90.exe windows:5 windows x86
4d003678657a2aa5de3e698e742da6ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hid
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetManufacturerString
HidD_GetAttributes
HidP_GetCaps
HidD_GetHidGuid
setupapi
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
kernel32
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
IsProcessorFeaturePresent
GetTimeZoneInformation
UnhandledExceptionFilter
GetStringTypeW
GetConsoleCP
GetConsoleMode
WriteConsoleW
SetEnvironmentVariableA
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
SizeofResource
LockResource
LoadResource
FindResourceW
GetEnvironmentStringsW
MultiByteToWideChar
GetModuleFileNameW
SetCurrentDirectoryW
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount
CreateThread
CloseHandle
GetLastError
CreateFileW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetLocalTime
WriteFile
ReadFile
GetVersionExW
InterlockedDecrement
InterlockedIncrement
lstrlenW
GetStartupInfoW
FormatMessageW
LocalFree
SetEvent
ResetEvent
CreateEventW
InitializeCriticalSection
EnterCriticalSection
WideCharToMultiByte
lstrlenA
SetCommTimeouts
SetCommMask
GetCommState
BuildCommDCBW
SetCommState
PurgeComm
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
ExitThread
ExitProcess
HeapReAlloc
RaiseException
RtlUnwind
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
DecodePointer
EncodePointer
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
GetTempPathW
LeaveCriticalSection
WaitCommEvent
ClearCommError
GetNumberFormatW
GetWindowsDirectoryW
GetTempFileNameW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
GetFileAttributesW
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryW
FileTimeToSystemTime
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalGetAtomNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DeleteFileW
lstrcmpiW
GetThreadLocale
WaitForSingleObject
SetThreadPriority
GetPrivateProfileIntW
lstrcpyW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
ReleaseActCtx
CreateActCtxW
lstrcmpA
GlobalFree
CopyFileW
GlobalSize
GetCurrentProcessId
MulDiv
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleW
FreeLibrary
GetProcAddress
CompareStringW
LoadLibraryW
ActivateActCtx
DeactivateActCtx
SetLastError
lstrcmpW
GetOverlappedResult
SuspendThread
ResumeThread
GetCommMask
WaitForMultipleObjects
user32
InvertRect
SetParent
DrawFrameControl
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
MonitorFromPoint
UpdateLayeredWindow
UnionRect
IsZoomed
GetAsyncKeyState
SetWindowRgn
PostThreadMessageW
InvalidateRgn
CopyAcceleratorTableW
SetRect
MessageBeep
DeleteMenu
WaitMessage
UnregisterClassW
SetLayeredWindowAttributes
EnumDisplayMonitors
GetSysColorBrush
RealChildWindowFromPoint
CharNextW
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
IsClipboardFormatAvailable
CharUpperW
CopyImage
DrawIconEx
GetNextDlgGroupItem
RedrawWindow
SetRectEmpty
IsRectEmpty
ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
SystemParametersInfoW
GetMenuItemInfoW
MapVirtualKeyW
GetKeyNameTextW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetDesktopWindow
CreateDialogIndirectParamW
EndDialog
IntersectRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
CheckMenuItem
GetMenuState
GetMenuStringW
InsertMenuW
RemoveMenu
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetCursorPos
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
SetWindowsHookExW
CallNextHookEx
GetClassLongW
HideCaret
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
IsWindowVisible
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcW
SetWindowLongW
SetWindowPos
GetWindow
MessageBoxW
GetWindowRgn
SubtractRect
DrawEdge
EnableMenuItem
SetFocus
DrawTextW
GetWindowTextW
CreatePopupMenu
ScreenToClient
GetKeyState
PtInRect
ReleaseCapture
GetCapture
SetCapture
DestroyCaret
CreateCaret
ShowCaret
GetUpdateRect
CreateMenu
TranslateMDISysAccel
DrawMenuBar
LockWindowUpdate
DefMDIChildProcW
DefFrameProcW
MapVirtualKeyExW
IsCharLowerW
GetDoubleClickTime
CharUpperBuffW
CopyIcon
SetCaretPos
EnableScrollBar
ShowScrollBar
LoadCursorW
DefWindowProcW
GetClassInfoW
IsWindow
RegisterClipboardFormatW
GetFocus
GetMenuItemID
GetMenuItemCount
GetMenu
DestroyAcceleratorTable
SetClassLongW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
GetClassNameW
CreateAcceleratorTableW
SendMessageW
InflateRect
GetCursorPos
IsChild
WindowFromPoint
GetClientRect
GetWindowRect
GetParent
InvalidateRect
EnableWindow
UpdateWindow
LoadBitmapW
LoadImageW
DestroyCursor
DestroyMenu
DestroyIcon
GetWindowLongW
GetNextDlgTabItem
SetCursor
ClientToScreen
GetActiveWindow
GetSubMenu
TrackPopupMenuEx
PostMessageW
CopyRect
DrawFocusRect
OffsetRect
DrawStateW
FillRect
GetSysColor
GetDC
ReleaseDC
GetIconInfo
CreateIconIndirect
LoadMenuW
FrameRect
RegisterDeviceNotificationW
LoadIconW
GetSystemMenu
AppendMenuW
IsIconic
GetSystemMetrics
DrawIcon
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetTimer
KillTimer
NotifyWinEvent
gdi32
CreateRectRgnIndirect
CreateFontIndirectW
GetMapMode
StretchBlt
GetTextMetricsW
CreateRectRgn
CreatePolygonRgn
PtInRegion
FillRgn
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetTextExtentPoint32W
ExtSelectClipRgn
Polyline
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CopyMetaFileW
SetRectRgn
CombineRgn
PatBlt
DPtoLP
GetBkColor
GetTextColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetRgnBox
CreateRoundRectRgn
CreateDIBSection
SetDIBColorTable
RealizePalette
CreateEllipticRgn
Ellipse
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
OffsetRgn
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
FrameRgn
GetBoundsRect
SetPixelV
GetTextFaceW
Polygon
GetCharWidthW
CreateSolidBrush
CreateFontW
CreateDCW
GetDeviceCaps
SetPixel
GetPixel
DeleteDC
SetTextColor
SetBkColor
SelectObject
CreateBitmap
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
DeleteObject
Rectangle
CreatePen
GetObjectW
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegEnumValueW
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyExW
RegQueryValueW
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHGetFileInfoW
DragFinish
DragQueryFileW
ShellExecuteW
ShellExecuteExW
SHAppBarMessage
DragAcceptFiles
SHGetSpecialFolderLocation
comctl32
_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathIsUNCW
ole32
DoDragDrop
CreateStreamOnHGlobal
CoRegisterMessageFilter
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleInitialize
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
OleUninitialize
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleLockRunning
CoCreateGuid
IsAccelerator
oleaut32
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
VariantCopy
SysAllocString
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysStringLen
SysFreeString
oledlg
OleUIBusyW
gdiplus
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI
winmm
PlaySoundW
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 325KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 645KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ