Static task
static1
Behavioral task
behavioral1
Sample
0ca19f047db638de8f491fa4c80fb8cf67fce58f0482c83daa012365b9764c90.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0ca19f047db638de8f491fa4c80fb8cf67fce58f0482c83daa012365b9764c90.exe
Resource
win10v2004-20230915-en
General
-
Target
0ca19f047db638de8f491fa4c80fb8cf67fce58f0482c83daa012365b9764c90
-
Size
1.2MB
-
MD5
a8438a51179c2755bcaf65dcdd60f00e
-
SHA1
28233964c8f557149e9e36e4ce6772299c57e4fa
-
SHA256
0ca19f047db638de8f491fa4c80fb8cf67fce58f0482c83daa012365b9764c90
-
SHA512
336459b10f19d7aec035b500927dd3f111b06310a0006b22f6a63c2128a1f96cd1da43d58539d91cc1f9c0d8428c3aa3cb59b6e11bc2209eb5cb61f59230ca35
-
SSDEEP
24576:Rn7Edlaj9gOai1EoebpyTPPTAW4miPTKihaPTQFW4DuSwZPSCdDS+OuSl3Q6:hWoj9ghi1RebpyT390bYVGuSwZPSCdDC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ca19f047db638de8f491fa4c80fb8cf67fce58f0482c83daa012365b9764c90
Files
-
0ca19f047db638de8f491fa4c80fb8cf67fce58f0482c83daa012365b9764c90.exe windows:5 windows x86
753f890def005207d1453fffc36459be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
GetCurrentThread
GlobalDeleteAtom
GetVersionExA
lstrcmpW
GlobalFindAtomA
GetCPInfo
GetOEMCP
RtlUnwind
GetStartupInfoW
HeapAlloc
HeapFree
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentThreadId
GlobalFlags
GlobalAddAtomA
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
lstrcmpA
GlobalGetAtomNameA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetModuleFileNameW
GetModuleHandleW
CompareStringA
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
lstrlenA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenW
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32First
Process32Next
GetACP
CloseHandle
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
DestroyMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
SetForegroundWindow
IsIconic
PostMessageA
SetWindowPos
SetWindowLongA
IsWindow
GetSubMenu
GetMenuItemCount
GetDlgItem
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
GetKeyState
GetMenuItemID
GetMenuState
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
LoadCursorA
UnhookWindowsHookEx
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
SendMessageA
GetWindowThreadProcessId
GetWindowTextA
PeekMessageA
ValidateRect
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
SystemParametersInfoA
gdi32
DeleteObject
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
GetStockObject
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetMapMode
DeleteDC
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ