?GetTracer@@YAPAUITracer@eka@@XZ
Static task
static1
Behavioral task
behavioral1
Sample
57c61b47546e3e45b624d4a77a3383f1ecf79902cd8eab8246a8f6c5028ad042.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
57c61b47546e3e45b624d4a77a3383f1ecf79902cd8eab8246a8f6c5028ad042.exe
Resource
win10v2004-20231023-en
General
-
Target
57c61b47546e3e45b624d4a77a3383f1ecf79902cd8eab8246a8f6c5028ad042
-
Size
962KB
-
MD5
7239119ebfef4eaa9efc63f50feb9be5
-
SHA1
35f59826cc6161fa946a7e79ab90c343d9025769
-
SHA256
57c61b47546e3e45b624d4a77a3383f1ecf79902cd8eab8246a8f6c5028ad042
-
SHA512
4b2034b209cd1da02514516823c440d07fe2b1cfbc7f7d10157319cb4913c3937aecbdb556e6d509429c6e4dcfb756d1500578c3f62aaf1d692373f07252fd1d
-
SSDEEP
24576:KPzt7yILbb3Cd8Z7CV/B01HZIpevCMvK9TPE:s3Q8tOMzqMvK9TM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57c61b47546e3e45b624d4a77a3383f1ecf79902cd8eab8246a8f6c5028ad042
Files
-
57c61b47546e3e45b624d4a77a3383f1ecf79902cd8eab8246a8f6c5028ad042.exe windows:5 windows x86
9d1af81b7882ab95144b0f6e17651c8b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesW
DeleteFileW
GetTempPathW
GetModuleFileNameW
FreeLibrary
lstrcmpiW
MultiByteToWideChar
LoadLibraryExW
DecodePointer
DebugBreak
OutputDebugStringW
lstrlenA
GetModuleHandleExW
GetSystemTimeAsFileTime
FileTimeToSystemTime
GetComputerNameW
GetSystemInfo
GetTickCount
LoadLibraryW
WaitForSingleObjectEx
CreateDirectoryW
GetVolumeInformationW
FindFirstFileExW
GetFullPathNameW
FindNextFileW
RemoveDirectoryW
FindClose
GetSystemDirectoryW
SetFileAttributesW
Sleep
SetVolumeLabelW
GetDiskFreeSpaceExW
GetCurrentDirectoryW
MoveFileW
IsDebuggerPresent
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
GetFileAttributesExW
WriteConsoleW
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapSize
GetFileType
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
ExitProcess
GetStdHandle
FreeLibraryAndExitThread
SetFileTime
ExitThread
CreateThread
TlsFree
SetLastError
lstrlenW
CloseHandle
LockResource
LoadResource
SizeofResource
FindResourceW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FlushFileBuffers
GetFileSizeEx
SetFilePointerEx
ReadFile
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetStartupInfoW
GetCurrentProcessId
QueryPerformanceCounter
CreateEventW
ResetEvent
SetEvent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
LCMapStringEx
InitializeCriticalSectionEx
WriteFile
CreateFileW
GetCurrentThreadId
LocalFree
GetModuleHandleExA
GetModuleFileNameA
GetProcAddress
GetModuleHandleW
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
RaiseException
WideCharToMultiByte
GetStringTypeW
user32
LoadStringW
MessageBoxW
GetActiveWindow
SendMessageW
UnregisterClassW
DialogBoxParamW
GetSystemMetrics
KillTimer
SetFocus
MessageBeep
EndDialog
SetDlgItemTextW
GetWindowTextW
GetWindowTextLengthW
EnableWindow
GetDlgItem
SetWindowTextW
LoadIconW
GetWindow
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
SetCursor
LoadCursorW
GetWindowLongW
DestroyWindow
DefWindowProcW
CharNextW
SetWindowLongW
SetTimer
advapi32
SetNamedSecurityInfoW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
CryptReleaseContext
CryptAcquireContextW
CryptDestroyKey
CryptExportKey
CryptImportKey
RegDeleteKeyW
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoCreateGuid
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
crypt32
CertFreeCertificateContext
CryptStringToBinaryA
CertCreateCertificateContext
CryptEncodeObjectEx
CryptBinaryToStringA
CryptProtectData
CryptUnprotectData
CryptDecodeObjectEx
CryptImportPublicKeyInfo
CryptUnprotectMemory
CryptProtectMemory
Exports
Exports
Sections
.text Size: 438KB - Virtual size: 437KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ