Static task
static1
Behavioral task
behavioral1
Sample
97fefb1404bef0c43418586e7d4476d0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
97fefb1404bef0c43418586e7d4476d0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
97fefb1404bef0c43418586e7d4476d0_exe32.exe
-
Size
3.3MB
-
MD5
97fefb1404bef0c43418586e7d4476d0
-
SHA1
eb5831326050c5d3a86423f77fdfb5a1f6190fa2
-
SHA256
347ac7a2a9b08ce0371fd06b054d031a62234df8679a662d966287b73b9366c6
-
SHA512
9f3b0280a313c79229225f2fed0fbea221665009d3fbc4cb3c298c99fc471ea218c2838810ec98078bcb29664bb42ef402a500e3d58002810a3540e1b8b0f1f2
-
SSDEEP
49152:DJNmEyqcu5uU350+tijXu0bS78/rYJKn/BrstlbBMbozsVp7Z/q6D5:Db/Jt9qjXFv95r8bBiMsVVZ/q6F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97fefb1404bef0c43418586e7d4476d0_exe32.exe
Files
-
97fefb1404bef0c43418586e7d4476d0_exe32.exe.exe windows:4 windows x86
b25436d5416059fd019dc06965dd799a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_Copy
ImageList_EndDrag
ImageList_GetImageCount
ImageList_Remove
ImageList_Replace
ImageList_SetImageCount
ord17
ImageList_BeginDrag
ImageList_AddMasked
ImageList_DrawIndirect
ImageList_Add
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
kernel32
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
ExitProcess
GetVersion
GetModuleHandleA
RtlUnwind
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
GetLastError
GetCommandLineW
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
GetLocalTime
GetStartupInfoA
GetProcAddress
GetEnvironmentStrings
user32
GetWindowDC
GetWindow
GetTopWindow
GetSystemMenu
GetSysColorBrush
GetSubMenu
GetScrollInfo
GetPropA
GetParent
GetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemCount
GetMenu
GetKeyState
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetClipboardFormatNameA
GetClipboardData
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoW
GetClassInfoA
GetCaretPos
GetCapture
GetActiveWindow
FrameRect
FillRect
EnumThreadWindows
EnumPropsA
EnumClipboardFormats
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
SetTimer
DrawStateW
DrawStateA
DrawMenuBar
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateCaret
CountClipboardFormats
CopyImage
CloseClipboard
GetWindowLongA
ChildWindowFromPointEx
CharUpperBuffW
UnregisterClassW
CharUpperA
CharToOemBuffA
CharToOemA
CharLowerBuffW
CharLowerBuffA
CharLowerA
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AdjustWindowRectEx
SystemParametersInfoW
GetSysColor
GetSystemMetrics
SetSysColors
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoW
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongA
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterClipboardFormatA
RegisterClassW
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharBuffA
OemToCharA
MsgWaitForMultipleObjects
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
LoadImageA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
GetWindowLongW
VkKeyScanA
WindowFromDC
ClientToScreen
UpdateWindow
IsWindowEnabled
IsWindow
IsRectEmpty
IsMenu
IsIconic
IsClipboardFormatAvailable
UnregisterClassA
TranslateMessage
TrackPopupMenuEx
SystemParametersInfoA
ShowWindowAsync
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowTextW
SetWindowTextA
SetWindowRgn
SetWindowPos
SetWindowPlacement
SetWindowLongW
CharUpperBuffA
SetWindowLongA
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuItemA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
DrawTextA
GetWindowPlacement
gdi32
StartPage
StartDocA
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetTextCharacterExtra
SetTextAlign
SetStretchBltMode
SetROP2
SetRectRgn
SetPolyFillMode
SetPixel
SetMapMode
SetBrushOrgEx
SetBkMode
SetBkColor
SetArcDirection
SelectPalette
SelectObject
SaveDC
RestoreDC
RectVisible
RectInRegion
Rectangle
RealizePalette
PtInRegion
Polyline
PolyBezier
Pie
PatBlt
PaintRgn
OffsetViewportOrgEx
OffsetRgn
MoveToEx
MaskBlt
LPtoDP
LineTo
IntersectClipRect
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextExtentExPointW
GetTextExtentExPointA
GetTextColor
GetTextAlign
GetStockObject
GetROP2
GetRgnBox
GetRegionData
GetPixel
GetObjectW
GetObjectType
GetObjectA
GetMapMode
GetDIBits
GetDeviceCaps
GetDCOrgEx
GetCurrentObject
GetClipRgn
GetClipBox
GetCharABCWidthsW
GetCharABCWidthsA
GetBkColor
GetBitmapBits
FillRgn
ExtTextOutW
ExtTextOutA
ExtSelectClipRgn
ExtFloodFill
ExtCreateRegion
ExtCreatePen
ExcludeClipRect
EqualRgn
EnumFontFamiliesExW
EnumFontFamiliesExA
EnumFontFamiliesA
EndPage
EndDoc
Ellipse
DPtoLP
DeleteObject
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreateFontIndirectW
CreateFontIndirectA
CreateEllipticRgn
CreateDIBSection
CreateDIBitmap
CreateDCW
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CombineRgn
Chord
BitBlt
Arc
AbortDoc
winspool.drv
EnumPrintersW
EnumPrintersA
OpenPrinterA
OpenPrinterW
GetPrinterA
StartDocPrinterA
StartPagePrinter
WritePrinter
EndPagePrinter
AbortPrinter
EndDocPrinter
DocumentPropertiesA
DocumentPropertiesW
DeviceCapabilitiesW
DeviceCapabilitiesA
ClosePrinter
comdlg32
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
ChooseColorA
ChooseFontA
ChooseFontW
PrintDlgA
PrintDlgW
CommDlgExtendedError
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
shell32
DragQueryFileW
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA
ole32
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
oleaut32
VariantCopy
VariantClear
VariantChangeTypeEx
SysReAllocStringLen
SysFreeString
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayRedim
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayCreate
SafeArrayAccessData
VariantInit
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cdata5 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btls2 Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rml1013 Size: 599KB - Virtual size: 599KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE