Static task
static1
Behavioral task
behavioral1
Sample
debe6b5b9ae633082ca822e3524bb82b38dca6e24f57d3a3af3c9102362161c5.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
debe6b5b9ae633082ca822e3524bb82b38dca6e24f57d3a3af3c9102362161c5.exe
Resource
win10v2004-20231020-en
General
-
Target
debe6b5b9ae633082ca822e3524bb82b38dca6e24f57d3a3af3c9102362161c5
-
Size
5.4MB
-
MD5
3487aef6488f086863f7075079024de6
-
SHA1
b8094112d7ef73a4d00a4ca9b34db6e7ce313974
-
SHA256
debe6b5b9ae633082ca822e3524bb82b38dca6e24f57d3a3af3c9102362161c5
-
SHA512
70171684386b75f2647da30c75aa1b74cd57346f9d3bd474a534d78322d1d0f7444719deec53e8a4c40eee35902c58d42744cd7bb3041aa6c821898c453c268c
-
SSDEEP
49152:s0vbXt0TBx1E+KUXChJ75G/so1eENZEXMA1bc9qjZAFseNztr9PxUrUN:sM6HGsheOkq7WoN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource debe6b5b9ae633082ca822e3524bb82b38dca6e24f57d3a3af3c9102362161c5
Files
-
debe6b5b9ae633082ca822e3524bb82b38dca6e24f57d3a3af3c9102362161c5.exe windows:6 windows x86
316f91cc8f548f345924509414546c51
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hid
HidD_GetHidGuid
HidD_GetAttributes
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
kernel32
CloseHandle
GetOverlappedResult
CancelIo
ResetEvent
CreateEventW
GetTickCount
WriteFile
WaitForMultipleObjects
DecodePointer
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
ReadFile
CreateFileW
GetCommandLineW
GetModuleHandleW
HeapSize
GetProcessHeap
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetErrorMode
GetModuleFileNameW
GetCurrentThread
GetCurrentThreadId
GetVersionExW
FreeLibrary
LoadLibraryExW
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalDeleteAtom
lstrcmpA
lstrcmpW
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
SetEnvironmentVariableA
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetTimeZoneInformation
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapQueryInformation
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
WaitForSingleObjectEx
SetConsoleCtrlHandler
FatalAppExitA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
SetStdHandle
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
WriteConsoleW
OutputDebugStringW
GetFileType
GetStdHandle
IsProcessorFeaturePresent
IsDebuggerPresent
ExitThread
CreateThread
GetModuleFileNameA
AreFileApisANSI
ExitProcess
GetSystemInfo
HeapValidate
GetModuleHandleExW
RtlUnwind
GetCommandLineA
LocalUnlock
LocalLock
SearchPathW
Sleep
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
GetWindowsDirectoryW
CreateSemaphoreW
CreateMutexW
ReleaseMutex
ReleaseSemaphore
FindResourceExW
PulseEvent
GetUserDefaultLCID
ReplaceFileW
GetTempFileNameW
GetDiskFreeSpaceW
SetFileTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
GetStringTypeExW
MoveFileW
lstrcmpiW
GetCurrentProcess
GetHandleInformation
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
VirtualProtect
GetProfileIntW
GlobalFindAtomW
FreeResource
DeleteFileW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
GetCurrentProcessId
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
CompareStringA
GetThreadPriority
SetThreadPriority
GetSystemDirectoryW
EncodePointer
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CopyFileW
FormatMessageW
LocalFree
GlobalFree
GlobalSize
LoadLibraryA
SuspendThread
WaitForSingleObject
SetEvent
MulDiv
GlobalUnlock
GetAtomNameW
GlobalGetAtomNameW
LoadLibraryW
GetProcAddress
GetModuleHandleA
SetLastError
OutputDebugStringA
user32
EmptyClipboard
SetClipboardData
CloseClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
MessageBeep
GetIconInfo
DrawIconEx
MsgWaitForMultipleObjectsEx
UnionRect
IsRectEmpty
GetDialogBaseUnits
SendDlgItemMessageA
ReuseDDElParam
GetMenuBarInfo
LoadImageW
TranslateAcceleratorW
CharUpperW
DestroyIcon
GetAsyncKeyState
ReleaseCapture
OffsetRect
SetRect
EndDialog
CreateDialogIndirectParamW
GetSystemMetrics
MapVirtualKeyW
GetKeyNameTextW
UnpackDDElParam
GetClipboardFormatNameW
GetClipboardFormatNameA
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetClassLongW
EqualRect
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
CreateWindowExW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
IsDialogMessageW
SetWindowLongW
GetWindowTextLengthW
ScrollWindowEx
SetFocus
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
IntersectRect
InflateRect
SetRectEmpty
DestroyMenu
LoadAcceleratorsW
GetClassInfoW
RealChildWindowFromPoint
GetClassNameW
PtInRect
GetWindowTextW
SetWindowTextW
GetDlgCtrlID
GetWindowThreadProcessId
MessageBoxW
IsWindowEnabled
SetCursor
NotifyWinEvent
ArrangeIconicWindows
DlgDirSelectComboBoxExW
DlgDirListComboBoxW
DlgDirSelectExW
DlgDirListW
LoadIconW
LoadCursorW
GetWindow
GetLastActivePopup
UpdateLayeredWindow
FindWindowExW
FindWindowW
SetParent
GetParent
GetDesktopWindow
GetWindowLongW
ChildWindowFromPointEx
ChildWindowFromPoint
WindowFromPoint
MapWindowPoints
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetWindowContextHelpId
SetWindowContextHelpId
GetWindowRect
EnableScrollBar
IsClipboardFormatAvailable
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
LockWindowUpdate
RedrawWindow
ValidateRgn
InvalidateRgn
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRgn
GetUpdateRect
GetDCEx
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
DragDetect
GetSystemMenu
DrawMenuBar
HiliteMenuItem
EnableWindow
KillTimer
SetTimer
SetCapture
GetCapture
GetActiveWindow
GetOpenClipboardWindow
ChangeClipboardChain
GetClipboardViewer
SetClipboardViewer
GetClipboardOwner
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
IsChild
PostThreadMessageW
SendNotifyMessageW
DrawAnimatedRects
DrawCaption
SystemParametersInfoW
CopyImage
GetClientRect
GetMenuCheckMarkDimensions
GetFocus
MapDialogRect
PostMessageW
SendMessageW
LoadBitmapW
CheckMenuRadioItem
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
GetMenuContextHelpId
SetMenuContextHelpId
ScrollDC
ExcludeUpdateRgn
WindowFromDC
GetTabbedTextExtentW
TabbedTextOutW
DrawStateW
GrayStringW
DrawTextExW
DrawTextW
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
SetMenuItemBitmaps
DeleteMenu
RemoveMenu
MonitorFromPoint
TrackMouseEvent
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetClassLongW
GetDoubleClickTime
CopyIcon
RegisterClipboardFormatW
CharUpperBuffW
EnumChildWindows
DefFrameProcW
DefMDIChildProcW
GetTopWindow
TranslateMDISysAccel
ModifyMenuW
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
GetMenuState
GetMenuStringW
LoadMenuIndirectW
LoadMenuW
IsMenu
DrawFrameControl
DrawEdge
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
DispatchMessageW
TranslateMessage
GetMessageW
CopyRect
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
IsWindow
UnhookWindowsHookEx
PeekMessageW
PostQuitMessage
UnregisterClassW
SubtractRect
InSendMessage
DestroyCursor
ShowScrollBar
GetClassInfoExW
gdi32
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
AnimatePalette
Arc
BitBlt
Chord
CombineRgn
CreateBitmap
CreateBitmapIndirect
CreateBrushIndirect
CreateCompatibleBitmap
CreateDiscardableBitmap
CreateCompatibleDC
CreateDCW
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateFontIndirectW
CreateFontW
CreateICW
CreatePalette
CreatePenIndirect
CreatePolyPolygonRgn
CreateRectRgnIndirect
CreateRoundRectRgn
DrawEscape
Ellipse
EnumObjects
EqualRgn
Escape
ExtEscape
ExtCreateRegion
ExtFloodFill
FillRgn
FloodFill
FrameRgn
GetROP2
GetAspectRatioFilterEx
GetBkColor
GetBkMode
GetBitmapBits
GetBitmapDimensionEx
GetBoundsRect
GetBrushOrgEx
GetCharWidthW
GetCharWidthFloatW
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetCurrentObject
GetFontData
GetGlyphOutlineW
GetGraphicsMode
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetOutlineTextMetricsW
GetPaletteEntries
GetStockObject
GetPolyFillMode
GetRegionData
GetRgnBox
GetStretchBltMode
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextExtentPoint32W
GetFontLanguageInfo
GetCharacterPlacementW
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
InvertRgn
MaskBlt
PlgBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PolyPolygon
PtInRegion
PtVisible
RectInRegion
RectVisible
Rectangle
ResetDCW
RealizePalette
RoundRect
ResizePalette
SetBitmapBits
SetBoundsRect
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
UpdateColors
PlayEnhMetaFile
GdiComment
GetTextMetricsW
AngleArc
PolyPolyline
GetWorldTransform
GetColorAdjustment
CreateHalftonePalette
StartDocW
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetPath
PathToRegion
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GetMiterLimit
GetArcDirection
GetObjectW
TextOutW
ExtTextOutW
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetBitmapDimensionEx
SetBrushOrgEx
GetTextFaceW
GetKerningPairsW
UnrealizeObject
CopyMetaFileW
CloseMetaFile
CreateMetaFileW
CloseEnhMetaFile
CreateEnhMetaFileW
StretchDIBits
EnumFontFamiliesExW
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
CreateDIBSection
SetDIBColorTable
DeleteMetaFile
GetTextExtentPointW
GetObjectType
GetDeviceCaps
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateDIBPatternBrushPt
CreateHatchBrush
GetPixel
msimg32
TransparentBlt
AlphaBlend
GradientFill
winspool.drv
GetJobW
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
SetFileSecurityW
RegEnumKeyExW
GetFileSecurityW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
SHGetMalloc
SHAddToRecentDocs
ExtractIconW
SHGetFileInfoW
DragQueryFileW
DragFinish
ShellExecuteW
ShellExecuteExW
SHAppBarMessage
SHBrowseForFolderW
DragAcceptFiles
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
shlwapi
PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
StrFormatKBSizeW
uxtheme
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeParentBackground
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
OpenThemeData
CloseThemeData
DrawThemeText
ole32
GetClassFile
StgCreateDocfileOnILockBytes
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CreateStreamOnHGlobal
OleRun
CLSIDFromProgID
PropVariantCopy
CLSIDFromString
CoInitializeEx
StringFromGUID2
CoRegisterMessageFilter
CoInitialize
CoCreateInstance
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateGuid
CoUninitialize
CoGetClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateOleAdviseHolder
CreateDataAdviseHolder
GetRunningObjectTable
OleQueryCreateFromData
OleQueryLinkFromData
OleRegEnumVerbs
OleRegGetMiscStatus
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLoad
CreateFileMoniker
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoGetMalloc
OleSetMenuDescriptor
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
OleGetIconOfClass
OleLockRunning
OleIsRunning
OleSetContainedObject
OleSaveToStream
OleSave
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
WriteClassStm
CreateItemMoniker
CreateGenericComposite
StgIsStorageILockBytes
CoDisconnectObject
StgOpenStorageOnILockBytes
oleaut32
SysReAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VariantChangeType
VariantClear
SysAllocString
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VarDecFromStr
VarBstrFromDec
oledlg
OleUIUpdateLinksW
OleUIConvertW
OleUIChangeIconW
OleUIEditLinksW
OleUIPasteSpecialW
OleUIInsertObjectW
OleUIBusyW
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
gdiplus
GdipFree
GdipAlloc
GdipGetImageHeight
GdiplusStartup
GdipCloneImage
GdipGetImagePalette
GdipGetImagePaletteSize
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageWidth
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipCreateFromHDC
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundW
Sections
.text Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 705KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ