Static task
static1
Behavioral task
behavioral1
Sample
0a9785243956c57d0fdaa9231f5d0f8033451f843a8a7d9e513ffc70370c0a2c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0a9785243956c57d0fdaa9231f5d0f8033451f843a8a7d9e513ffc70370c0a2c.exe
Resource
win10v2004-20230915-en
General
-
Target
0a9785243956c57d0fdaa9231f5d0f8033451f843a8a7d9e513ffc70370c0a2c
-
Size
344KB
-
MD5
5e0c6762b64b12cbc437c5a81922ee7e
-
SHA1
822f561321dd16319614cc27df44aab9ef49c398
-
SHA256
0a9785243956c57d0fdaa9231f5d0f8033451f843a8a7d9e513ffc70370c0a2c
-
SHA512
a0998c8a627bb951bcb61142739a70a4d4bb8f3e7d999efc4d0fb14a145c0127ad693886e74a1b94fc0f8b468f92a959d3abdc64056853a15350fd3b0d8246b2
-
SSDEEP
6144:DKC2eStAwNoH5n3ZWskiKBFYmLa+G99GMD:8NounBGmyd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a9785243956c57d0fdaa9231f5d0f8033451f843a8a7d9e513ffc70370c0a2c
Files
-
0a9785243956c57d0fdaa9231f5d0f8033451f843a8a7d9e513ffc70370c0a2c.exe windows:5 windows x86
87e59b37239a318e8bfbb82d9aaa245f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpW
GlobalFindAtomA
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
HeapFree
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
GetFullPathNameW
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
GetVersionExA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
GetACP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetDriveTypeA
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
InterlockedCompareExchange
GlobalDeleteAtom
GetLocaleInfoA
InterlockedExchange
GetFileAttributesA
GlobalFlags
GlobalAddAtomA
CreateFileA
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
lstrcmpA
GlobalGetAtomNameA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetModuleHandleW
CompareStringA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
WideCharToMultiByte
DeleteFileW
GetCurrentProcess
GetCurrentProcessId
CreateDirectoryW
SetUnhandledExceptionFilter
FindClose
FindNextFileW
FindFirstFileW
lstrcpyW
SetLastError
GetCurrentThreadId
CreateFileW
FindResourceW
GetModuleFileNameW
FindResourceExA
LoadResource
GetProcessHeap
LockResource
SizeofResource
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
WinExec
FreeEnvironmentStringsA
GetModuleFileNameA
user32
GetClientRect
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
GetMenu
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetForegroundWindow
IsIconic
PostMessageA
SetWindowPos
SetWindowLongA
IsWindow
GetDlgItem
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
PeekMessageA
ValidateRect
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
GetWindowTextA
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxA
wsprintfW
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
GetKeyState
DestroyMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
CallWindowProcA
gdi32
SetMapMode
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
SetWindowExtEx
GetDeviceCaps
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
oleaut32
VariantChangeType
VariantClear
SystemTimeToVariantTime
VarUdateFromDate
VariantTimeToSystemTime
VariantInit
oleacc
CreateStdAccessibleObject
LresultFromObject
dbghelp
MiniDumpWriteDump
Sections
.text Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ