Static task
static1
Behavioral task
behavioral1
Sample
ec974ff3b5300863a5016effe5bdef9bfbdb760a3e796e49dc8e5b7991bf9bda.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ec974ff3b5300863a5016effe5bdef9bfbdb760a3e796e49dc8e5b7991bf9bda.exe
Resource
win10v2004-20230915-en
General
-
Target
ec974ff3b5300863a5016effe5bdef9bfbdb760a3e796e49dc8e5b7991bf9bda
-
Size
5.3MB
-
MD5
f23244889a7246b43d7ad82adc82f8f5
-
SHA1
087103b26ed6a704144cc6ce7e58da0c0f326841
-
SHA256
ec974ff3b5300863a5016effe5bdef9bfbdb760a3e796e49dc8e5b7991bf9bda
-
SHA512
b028808169ce39bf148d6aad0ba731ccbbef8280ee1ad322d7201ed1c01b9f3c9b1c08cd5e215047bd4f3d7222ae21ecd7832da902180d20fbe6a634c03469a4
-
SSDEEP
98304:5y/hOzKHvyEu6QwDFRzvZqWF3nhITMPXUCjop0AtD:qaKyEu0vTTPQp0AR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec974ff3b5300863a5016effe5bdef9bfbdb760a3e796e49dc8e5b7991bf9bda
Files
-
ec974ff3b5300863a5016effe5bdef9bfbdb760a3e796e49dc8e5b7991bf9bda.exe windows:4 windows x86
bc2f0e9e095f1ab2b80ae4933407d9cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
d3dx9_26
D3DXSaveSurfaceToFileA
D3DXCreateMeshFVF
D3DXQuaternionNormalize
D3DXQuaternionSlerp
D3DXLoadSurfaceFromSurface
D3DXCreateFontIndirectA
D3DXFrameDestroy
D3DXCreateEffectFromFileA
D3DXVec4Normalize
D3DXLoadMeshFromXA
D3DXMatrixRotationY
D3DXMatrixRotationZ
D3DXCreateTexture
D3DXSaveTextureToFileA
D3DXPlaneFromPoints
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationX
D3DXVec3TransformCoord
D3DXMatrixInverse
D3DXMatrixRotationQuaternion
D3DXQuaternionMultiply
D3DXLoadMeshHierarchyFromXA
D3DXMatrixTranslation
D3DXGetFVFVertexSize
D3DXMatrixMultiply
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileExA
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileExA
D3DXCreateSprite
D3DXMatrixLookAtLH
D3DXMatrixPerspectiveFovLH
D3DXVec3Project
D3DXVec3TransformNormal
D3DXMatrixTranspose
D3DXQuaternionRotationYawPitchRoll
D3DXPlaneTransform
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXVec2Normalize
D3DXMatrixRotationAxis
D3DXPlaneFromPointNormal
D3DXVec3CatmullRom
D3DXQuaternionInverse
D3DXComputeNormals
D3DXQuaternionRotationAxis
D3DXPlaneIntersectLine
D3DXGeneratePMesh
D3DXValidMesh
D3DXWeldVertices
D3DXMatrixScaling
D3DXFrameCalculateBoundingSphere
D3DXCleanMesh
D3DXVec3Normalize
dinput8
DirectInput8Create
d3d9
Direct3DCreate9
d3dxof
DirectXFileCreate
mfc71
ord4890
ord4580
ord2020
ord1671
ord1670
ord1551
ord5912
ord1620
ord1617
ord3946
ord1401
ord4244
ord5152
ord1908
ord5073
ord6275
ord4185
ord5203
ord3403
ord4722
ord4282
ord1600
ord5960
ord5235
ord5233
ord923
ord928
ord932
ord930
ord934
ord2390
ord2410
ord2394
ord2400
ord2398
ord2396
ord2413
ord2408
ord2392
ord2415
ord2403
ord2385
ord2387
ord2405
ord2178
ord2172
ord1522
ord6279
ord3802
ord6277
ord3345
ord4967
ord1362
ord5175
ord1964
ord1656
ord1655
ord1599
ord5200
ord2862
ord4486
ord4262
ord3182
ord354
ord605
ord2430
ord3645
ord3450
ord4566
ord2614
ord2621
ord6238
ord2016
ord2051
ord5156
ord5592
ord1379
ord5412
ord2742
ord5495
ord4257
ord4852
ord4739
ord1922
ord4222
ord3040
ord2768
ord5934
ord6043
ord4482
ord4264
ord368
ord616
ord4705
ord4472
ord4471
ord3682
ord3591
ord5174
ord2044
ord4444
ord4790
ord4735
ord4172
ord4777
ord4386
ord4401
ord4399
ord4381
ord4384
ord4379
ord4864
ord4861
ord3974
ord5915
ord1402
ord5214
ord3344
ord1361
ord4273
ord756
ord565
ord1903
ord5151
ord4181
ord630
ord2747
ord2021
ord3056
ord385
ord876
ord304
ord4591
ord297
ord4104
ord3648
ord3466
ord595
ord2246
ord1913
ord2615
ord5009
ord5012
ord4309
ord4135
ord2939
ord4904
ord943
ord5356
ord2992
ord2425
ord2424
ord4019
ord1557
ord3945
ord5148
ord5205
ord2173
ord1306
ord4277
ord4265
ord635
ord742
ord751
ord606
ord5165
ord4041
ord357
ord532
ord562
ord553
ord395
ord5725
ord5859
ord951
ord4299
ord1191
ord1187
ord266
ord265
ord2322
ord1482
ord5613
ord4125
ord911
ord5403
ord2131
ord2468
ord1185
ord4081
ord557
ord3210
ord1934
ord3161
ord1193
ord631
ord2280
ord386
ord1489
ord299
ord2933
ord2271
ord5833
ord2372
ord865
ord4109
ord6167
ord6138
ord5490
ord1440
ord2748
ord2751
ord3931
ord2288
ord2292
ord6006
ord5715
ord908
ord3684
ord1554
ord3195
ord620
ord2368
ord2991
ord572
ord589
ord330
ord709
ord4001
ord5641
ord502
ord4123
ord501
ord745
ord1439
ord6288
ord629
ord5089
ord384
ord1263
ord5491
ord3605
ord3596
ord760
ord3908
ord907
ord2272
ord1123
ord6099
ord4067
ord870
ord664
ord5431
ord427
ord3850
ord6166
ord298
ord6168
ord6173
ord4085
ord1614
ord905
ord577
ord3996
ord283
ord4212
ord5182
ord784
ord3934
ord5529
ord3997
ord781
ord2451
ord2902
ord5563
ord3397
ord3830
ord1126
ord1122
ord1054
ord547
ord959
ord334
ord5119
ord5225
ord593
ord6090
ord566
ord310
ord757
ord578
ord3333
ord4261
ord4481
ord3949
ord2644
ord3709
ord3719
ord3718
ord2533
ord2646
ord2540
ord2838
ord2714
ord4307
ord2835
ord2731
ord2537
ord5213
ord5230
ord4568
ord3948
ord2248
ord5226
ord5224
ord2931
ord1920
ord3832
ord5382
ord6219
ord5102
ord1010
ord3806
ord5583
ord2018
ord2063
ord4326
ord6276
ord3801
ord6278
ord4014
ord4038
ord1091
ord1084
ord762
ord764
ord3683
ord4467
ord4469
ord4473
ord3641
ord3849
ord2469
ord5446
ord1916
ord6179
ord5710
ord5716
ord4980
ord1207
msvcr71
__CxxFrameHandler
_controlfp
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_purecall
_vsnprintf
??0exception@@QAE@ABV0@@Z
_CxxThrowException
malloc
free
_except_handler3
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
qsort
_strrev
calloc
_ismbcdigit
_ftol
ldexp
frexp
memchr
_setmbcp
sprintf
rand
memmove
_CIacos
_CIasin
_CIpow
_mktime64
_time64
atoi
_localtime64
fclose
fprintf
fopen
getc
fread
_strlwr
_beginthreadex
realloc
wcslen
srand
strncpy
fseek
fwrite
strtok
ftell
_close
_creat
_errno
_splitpath
strrchr
tolower
printf
perror
_mbscmp
strftime
localtime
time
_stricmp
_CIfmod
atof
_snprintf
floor
ceil
_atoi64
toupper
_snwprintf
isalpha
isspace
isalnum
strncmp
strchr
strstr
memset
__security_error_handler
__dllonexit
_onexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
kernel32
GetVersion
WideCharToMultiByte
MultiByteToWideChar
lstrcpyA
GetModuleFileNameA
GetVersionExA
lstrlenA
Sleep
CreateDirectoryA
DeleteFileA
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
SetCurrentDirectoryA
GetCurrentDirectoryA
IsDBCSLeadByteEx
MulDiv
LoadLibraryA
GetCurrentProcess
GlobalMemoryStatus
ExitProcess
GetStartupInfoA
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
WaitForSingleObject
SetEvent
CreateEventA
WaitForMultipleObjects
ResetEvent
SleepEx
LockResource
SizeofResource
LoadResource
FindResourceA
GetACP
user32
GetKeyState
LoadCursorFromFileA
ShowCursor
wsprintfA
AdjustWindowRectEx
MoveWindow
GetKeyboardLayout
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
InvalidateRect
InvertRect
FillRect
GetFocus
LoadImageA
GetDlgItem
keybd_event
UnhookWindowsHookEx
CallNextHookEx
SystemParametersInfoA
GetSystemMetrics
SetFocus
ClientToScreen
SetCursorPos
RegisterClassA
SetRect
AdjustWindowRect
CreateWindowExA
GetWindowLongA
GetMenu
DestroyMenu
DestroyWindow
PostQuitMessage
GetCursorPos
ScreenToClient
GetClientRect
DefWindowProcA
MessageBoxA
SendMessageA
SetWindowLongA
SetWindowPos
GetClassLongA
GetWindowRect
ClipCursor
GetIconInfo
GetDC
ReleaseDC
LoadCursorA
SetCursor
DestroyCursor
GetMessageA
TranslateMessage
PeekMessageA
DispatchMessageA
WaitMessage
EnableWindow
UpdateWindow
PostMessageA
SetWindowsHookExA
MessageBoxW
MsgWaitForMultipleObjects
gdi32
SetTextColor
SetBkColor
GetTextExtentPoint32A
CreateFontA
GetDeviceCaps
SetMapMode
SetDeviceGammaRamp
GetDIBits
GetBitmapBits
GetStockObject
GetObjectA
CreateCompatibleDC
SelectObject
DeleteDC
CreateDIBSection
ExtTextOutW
GetTextExtentPoint32W
CreateFontIndirectA
CreateSolidBrush
GetTextMetricsA
TextOutW
CreateFontW
DeleteObject
SetBkMode
GetDeviceGammaRamp
ExtTextOutA
shell32
SHGetSpecialFolderPathA
comctl32
ord17
shlwapi
PathFileExistsA
msvcp71
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?_Xran@_String_base@std@@QBEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
ijl15
ord3
ord5
ord2
psapi
GetProcessMemoryInfo
winmm
timeKillEvent
timeGetTime
timeSetEvent
mmioAscend
mmioRead
mmioOpenA
mmioClose
mmioWrite
mmioAdvance
mmioSetInfo
mmioSeek
mmioCreateChunk
mmioGetInfo
mmioDescend
imm32
ImmReleaseContext
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetContext
ImmNotifyIME
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmGetCompositionStringW
ImmGetProperty
ws2_32
WSAGetLastError
send
recv
htons
inet_addr
ioctlsocket
connect
WSACreateEvent
WSAStartup
WSACleanup
WSAEnumNetworkEvents
WSACloseEvent
WSAWaitForMultipleEvents
WSAEventSelect
gethostbyname
socket
closesocket
sendto
select
recvfrom
bugtrap
BT_SetAppName
BT_InstallSehFilter
BT_SetSupportServer
BT_SetSupportURL
BT_SetFlags
BT_SetSupportEMail
dsound
ord11
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 577KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 250KB - Virtual size: 108.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ