Static task
static1
Behavioral task
behavioral1
Sample
ad90862e8ccf97b2a24412aa1ad828d6416505d9856f957f389b8c96a337a66e.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ad90862e8ccf97b2a24412aa1ad828d6416505d9856f957f389b8c96a337a66e.exe
Resource
win10v2004-20231020-en
General
-
Target
ad90862e8ccf97b2a24412aa1ad828d6416505d9856f957f389b8c96a337a66e
-
Size
232KB
-
MD5
645456035a55cdd4dd8d4df8fafc65b8
-
SHA1
e1e3bfde3fa4cd2e3f93a49f2e9e0d70d73553f0
-
SHA256
ad90862e8ccf97b2a24412aa1ad828d6416505d9856f957f389b8c96a337a66e
-
SHA512
4325e8c52a813930c26a1fffce6f66817ae083a95d44f7af23d44b89be2f0f9eebb7d76e7670662eaca1680868c86fd2fc20bb993b0b178f11cbcf18809f3a0b
-
SSDEEP
3072:HbP5wnh2CgaiqSuGp2o1ci2yU0WSgnmmCqOFn8PbquWq9ItHq1iitsiFrStgdOAP:HbP6DiqSuGp2hOkbRON8PS6dOaW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad90862e8ccf97b2a24412aa1ad828d6416505d9856f957f389b8c96a337a66e
Files
-
ad90862e8ccf97b2a24412aa1ad828d6416505d9856f957f389b8c96a337a66e.exe windows:0 windows x86
091329174e9b3e971b8ab750c1a21f45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
HeapReAlloc
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
CreateThread
ExitThread
HeapSize
GetACP
GetTimeZoneInformation
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
GetFileTime
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
GlobalAlloc
lstrcmpA
GetCurrentThread
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynA
MultiByteToWideChar
InterlockedIncrement
LocalFree
lstrlenA
WideCharToMultiByte
InterlockedDecrement
MulDiv
SetLastError
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GetTickCount
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
LeaveCriticalSection
WaitForSingleObject
InitializeCriticalSection
EnterCriticalSection
SetEvent
DeleteCriticalSection
GetFileSize
ReadFile
Sleep
CreateFileA
CloseHandle
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
HeapAlloc
UnhandledExceptionFilter
user32
ShowWindow
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
wvsprintfA
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyMenu
CharUpperA
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
InflateRect
GetClassNameA
LoadCursorA
GetSysColorBrush
LoadStringA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetTopWindow
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetWindowLongA
SetWindowLongA
GetActiveWindow
GetCapture
InvalidateRect
UpdateWindow
PtInRect
CopyRect
GetMenu
SetRect
GetParent
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
ReleaseCapture
SetCapture
IntersectRect
GetSysColor
FillRect
IsIconic
GetSystemMetrics
GetClientRect
GetUpdateRect
SetWindowTextA
IsDialogMessageA
OffsetRect
SendMessageA
SetTimer
LoadIconA
MessageBoxA
EnableWindow
LoadMenuA
EnableMenuItem
ClientToScreen
GetSubMenu
DrawIcon
GetMenuItemID
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
SetBkMode
GetStockObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreatePen
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
GetTextExtentPointA
BitBlt
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
shell32
ShellExecuteA
comctl32
ord17
imagehlp
MakeSureDirectoryPathExists
wininet
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ