Static task
static1
Behavioral task
behavioral1
Sample
4ad58b3cb73993c2200302277e6de15aaaa3b7755ad202d479f64f526acf4ff4.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
4ad58b3cb73993c2200302277e6de15aaaa3b7755ad202d479f64f526acf4ff4.exe
Resource
win10v2004-20231020-en
General
-
Target
4ad58b3cb73993c2200302277e6de15aaaa3b7755ad202d479f64f526acf4ff4
-
Size
3.7MB
-
MD5
04325ff80107f7b9f7a33f794c7155e1
-
SHA1
4cd579236dfe901b98047b708c623e799490d030
-
SHA256
4ad58b3cb73993c2200302277e6de15aaaa3b7755ad202d479f64f526acf4ff4
-
SHA512
33ddc47047692b96955b2e85cf31283d9c927135237a5388c7ae9cfd36fbe69fc2fae9f3b8fd858734806bfedd97c7672131e9ea03343045d6ffec15e3aa00e7
-
SSDEEP
98304:VMnpn9EMy1FZ4Nc8LY1cUtw5FRkBFLOAkGkzdnEVomFHKnPxQ:VMnpn9GGS1ptw5FRkBFLOyomFHKnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ad58b3cb73993c2200302277e6de15aaaa3b7755ad202d479f64f526acf4ff4
Files
-
4ad58b3cb73993c2200302277e6de15aaaa3b7755ad202d479f64f526acf4ff4.exe windows:5 windows x86
cb2c424435742bfebdcee82274e74fe1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
id_fpr
FP_FeatureMatch
FP_GetQualityScore
FP_FeatureExtract
FP_Begin
FP_End
id_fprcap
LIVESCAN_SaveChar2FPLib
LIVESCAN_GetFingerLibSize
LIVESCAN_MatchFingerLib
LIVESCAN_MakeFpLib
LIVESCAN_GetProductSN
LIVESCAN_DetectFP
LIVESCAN_GetFirmwareVersion
LIVESCAN_EndCapture
LIVESCAN_BeginCapture
LIVESCAN_PlaySound
LIVESCAN_GetFPRawData
LIVESCAN_Close
LIVESCAN_GetErrorInfo
LIVESCAN_Init
LIVESCAN_GetDesc
kernel32
GetConsoleMode
GetConsoleCP
GetACP
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetStringTypeW
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
GetTimeZoneInformation
RtlUnwind
OutputDebugStringW
SetFilePointerEx
ReadConsoleW
GetTimeFormatW
GetDateFormatW
LCMapStringW
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetSystemInfo
CreateEventW
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
GetTickCount
WideCharToMultiByte
HeapFree
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
OutputDebugStringA
SetLastError
GetCurrentThread
GetCurrentThreadId
GetVersionExW
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadLibraryW
GlobalAlloc
GlobalLock
GlobalDeleteAtom
lstrcmpA
lstrcmpW
lstrcpyW
LoadLibraryA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeResource
GlobalUnlock
GlobalFree
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcessId
GlobalSize
LocalFree
MulDiv
FormatMessageW
CopyFileW
CloseHandle
SetEvent
WaitForSingleObject
WriteConsoleW
SetThreadPriority
SuspendThread
ResumeThread
GlobalAddAtomW
EncodePointer
GetSystemDirectoryW
GlobalFindAtomW
CompareStringW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetCurrentDirectoryW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
DeleteFileW
CreateFileW
GetFileAttributesW
GetFileSize
SetFilePointer
GetTempPathW
GlobalGetAtomNameW
FileTimeToSystemTime
FindClose
FindFirstFileW
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
UnlockFile
WriteFile
DuplicateHandle
GetCurrentProcess
lstrcmpiW
VirtualProtect
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
Sleep
GetProfileIntW
SearchPathW
GetWindowsDirectoryW
GetTempFileNameW
FindResourceExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
user32
CloseClipboard
OpenClipboard
MonitorFromPoint
SetParent
IntersectRect
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
CopyImage
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
GetMenuItemInfoW
DestroyMenu
SendDlgItemMessageA
IsDialogMessageW
SetWindowTextW
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetTopWindow
GetClassLongW
SetWindowLongW
EqualRect
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
GetClassNameW
InvalidateRect
UpdateWindow
SetCursor
ShowOwnedPopups
ValidateRect
GetKeyState
PeekMessageW
EmptyClipboard
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
PtInRect
GetCursorPos
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
DestroyIcon
LoadImageW
TrackMouseEvent
AppendMenuW
SendMessageW
IsIconic
UnregisterClassW
PostMessageW
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringW
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxW
IsZoomed
CharUpperW
GetAsyncKeyState
MessageBeep
NotifyWinEvent
SetCursorPos
SetRect
UnionRect
BringWindowToTop
CreatePopupMenu
LockWindowUpdate
EnableScrollBar
GetDoubleClickTime
GetIconInfo
GetSubMenu
LoadMenuW
CopyIcon
GetMenuDefaultItem
SetMenuDefaultItem
ModifyMenuW
DestroyAcceleratorTable
SetClassLongW
SetClipboardData
PostQuitMessage
RegisterWindowMessageW
DrawEdge
DrawFrameControl
IsWindowVisible
GetFocus
GetSystemMetrics
DrawStateW
SetWindowRgn
RedrawWindow
GetClientRect
GetWindowRect
MapWindowPoints
GetSysColor
GetSysColorBrush
DrawFocusRect
FillRect
InflateRect
OffsetRect
IsRectEmpty
GetParent
DrawIconEx
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongW
GetDesktopWindow
DefWindowProcW
GetClassInfoW
SetLayeredWindowAttributes
SetRectEmpty
CopyRect
LoadCursorW
SystemParametersInfoW
GetMonitorInfoW
EnumDisplayMonitors
GetUpdateRect
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyW
LoadAcceleratorsW
CreateAcceleratorTableW
CopyAcceleratorTableW
UpdateLayeredWindow
MapDialogRect
TranslateAcceleratorW
InsertMenuItemW
EnableWindow
GetSystemMenu
GetWindowRgn
DestroyCursor
DrawIcon
InvertRect
HideCaret
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
GetNextDlgGroupItem
PostThreadMessageW
IsClipboardFormatAvailable
FrameRect
CharUpperBuffW
RegisterClipboardFormatW
SubtractRect
GetKeyNameTextW
ReuseDDElParam
UnpackDDElParam
DispatchMessageW
LoadIconW
gdi32
CreateEllipticRgn
CombineRgn
CreateDIBitmap
DeleteDC
CreateHatchBrush
CreateRectRgn
GetTextFaceW
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
EnumFontFamiliesExW
GetSystemPaletteEntries
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
RoundRect
OffsetRgn
GetRgnBox
Rectangle
CreateRoundRectRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
RealizePalette
DPtoLP
SetRectRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
TextOutW
MoveToEx
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateBitmap
CreateDCW
CopyMetaFileW
GetObjectW
GetTextCharsetInfo
GetStockObject
GetDeviceCaps
EnumFontFamiliesW
CreatePatternBrush
CreatePen
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetTextMetricsW
Polyline
Polygon
CreatePolygonRgn
ExtTextOutW
PatBlt
GetTextExtentPoint32W
GetTextColor
GetBkColor
Ellipse
CreateSolidBrush
CreateRectRgnIndirect
DeleteObject
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegQueryValueW
RegEnumKeyW
shell32
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
ShellExecuteW
DragFinish
DragQueryFileW
SHGetFileInfoW
SHAppBarMessage
SHGetDesktopFolder
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW
PathFindExtensionW
StrFormatKBSizeW
uxtheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeParentBackground
IsAppThemed
ole32
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoDisconnectObject
CreateStreamOnHGlobal
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
oleaut32
VariantChangeType
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
SysStringLen
VariantCopy
VarBstrFromDate
SysFreeString
VariantInit
SysAllocStringLen
SysAllocString
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ