Static task
static1
Behavioral task
behavioral1
Sample
class.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
class.exe
Resource
win10v2004-20231025-en
General
-
Target
class.exe
-
Size
2.6MB
-
MD5
287a6d870c64fc91417a07d61a627696
-
SHA1
c10f0a95fb23a74561061bd9e5aa1e72179e52c1
-
SHA256
4a8345a548423436626a3cdebf0b42d5ccc12b61400faccfe33e4e8dde6cf5af
-
SHA512
f34aeb966022336bedb15e6eea3e67e659068de965b8e43d82d3e587a5c5081f7d79818cc40b6b651193d7f823fa99f6c64f32a2f34abf582c65a14ba116b56b
-
SSDEEP
49152:nWgbck3unTMVcxf3h6cQyvUFlx9YCtoUXji495bEQxkKvrIVoi/+r+cA1KvofXfo:6k+nHxf3h6cQyv+lxDtoki495ogkKvrk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource class.exe
Files
-
class.exe.exe windows:5 windows x86
71cac51087a46a818b41d84e140cce05
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
SetStdHandle
GetFileType
HeapQueryInformation
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetTimeZoneInformation
IsValidCodePage
LCMapStringW
SetHandleCount
GetStdHandle
GetConsoleCP
GetConsoleMode
ExitThread
GetLocaleInfoW
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
CompareStringW
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetDriveTypeW
SetEnvironmentVariableA
SizeofResource
LockResource
ExitProcess
VirtualQuery
GetStringTypeW
VirtualAlloc
LoadResource
FindResourceW
Sleep
GetModuleFileNameA
RaiseException
RtlUnwind
lstrlenA
MultiByteToWideChar
lstrcpyA
GetVersionExA
SetLastError
DeactivateActCtx
GetLastError
LoadLibraryA
GetModuleHandleA
GetProcAddress
ActivateActCtx
GlobalReAlloc
GlobalSize
GlobalLock
GlobalUnlock
MulDiv
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetCurrentThreadId
CloseHandle
GetSystemTimeAsFileTime
GetLocaleInfoA
FindResourceA
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
CreateFileA
GetFileSize
CreateMutexW
SetFilePointer
SetEndOfFile
FreeLibrary
HeapAlloc
SystemTimeToFileTime
SetFilePointerEx
QueryPerformanceCounter
HeapFree
WaitForSingleObject
InterlockedCompareExchange
UnlockFile
LockFile
WaitForSingleObjectEx
OutputDebugStringW
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetDateFormatA
GetTimeFormatA
FindFirstFileExA
GetDriveTypeA
DecodePointer
EncodePointer
FindResourceExW
VirtualProtect
GetUserDefaultLCID
SearchPathA
SetErrorMode
GetNumberFormatA
GetWindowsDirectoryA
GetTempFileNameA
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExA
GetVolumeInformationA
UnlockFileEx
GetProcessHeap
FormatMessageA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
lstrcmpiA
GetCurrentDirectoryA
FileTimeToSystemTime
GetACP
GetSystemDirectoryW
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GetThreadLocale
InterlockedIncrement
GetProfileIntA
ResumeThread
SetThreadPriority
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
LoadLibraryExA
lstrcmpA
GetModuleHandleW
InterlockedExchange
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalFree
CopyFileA
GlobalAlloc
lstrlenW
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
InitializeCriticalSectionAndSpinCount
lstrcmpW
DeleteFileA
AreFileApisANSI
GetSystemTime
LocalFree
GetTempPathA
GetCurrentProcessId
DeleteFileW
OutputDebugStringA
DeleteCriticalSection
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
GetDiskFreeSpaceW
EnterCriticalSection
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
CreateFileW
ReadFile
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
LeaveCriticalSection
HeapDestroy
FormatMessageW
LoadLibraryW
InitializeCriticalSection
WriteFile
WideCharToMultiByte
user32
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetIconInfo
HideCaret
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFocusRect
DrawFrameControl
DrawIconEx
SetClassLongA
DestroyAcceleratorTable
SetParent
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
PostThreadMessageA
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
NotifyWinEvent
SetWindowRgn
GetSystemMenu
LoadMenuW
CharUpperA
DestroyIcon
DeleteMenu
UnregisterClassA
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
GetSysColorBrush
CopyImage
RealChildWindowFromPoint
DestroyMenu
GetMenuItemInfoA
CharNextA
RegisterClipboardFormatA
DrawStateA
WaitMessage
CreateDialogIndirectParamA
EndDialog
GetMessageA
GetActiveWindow
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
MapVirtualKeyA
GetKeyNameTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
IsWindowEnabled
CopyIcon
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
GetScrollRange
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
ValidateRect
UpdateWindow
GetWindowRect
GetDesktopWindow
GetClassNameA
GetWindow
IsWindowVisible
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
GetWindowLongA
CharUpperBuffA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
GetUpdateRect
GetWindowRgn
SetWindowLongA
SetWindowPos
GetAsyncKeyState
GetNextDlgTabItem
FindWindowA
WindowFromPoint
ClientToScreen
CopyRect
GetDoubleClickTime
GrayStringA
DrawTextExA
DestroyCursor
SubtractRect
MapVirtualKeyExA
ShowWindow
IsCharLowerA
SendMessageA
GetParent
EnableWindow
PeekMessageA
TranslateMessage
DispatchMessageA
SetRectEmpty
GetSysColor
GetClientRect
GetSystemMetrics
SetScrollPos
GetDC
ReleaseDC
IsRectEmpty
SetScrollRange
OffsetRect
InflateRect
SetRect
PtInRect
InvalidateRect
GetCursorPos
ScreenToClient
SetCursor
LoadCursorA
SetTimer
KillTimer
EqualRect
MessageBoxA
LoadIconW
IsIconic
DrawIcon
IsWindow
GetFocus
MessageBeep
SystemParametersInfoA
FillRect
FrameRect
DrawEdge
DrawTextA
GetClassInfoA
DefWindowProcA
IntersectRect
GetKeyState
IsClipboardFormatAvailable
GetMessagePos
PostMessageA
InvertRect
SetCapture
ClipCursor
GetCapture
ReleaseCapture
TabbedTextOutA
LoadImageW
gdi32
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
DeleteObject
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
CreateSolidBrush
RestoreDC
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetTextColor
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
GetRgnBox
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceA
SetPixelV
SaveDC
CreateRectRgnIndirect
CreateBitmap
CreateDCA
CopyMetaFileA
SetBkColor
SetTextColor
PatBlt
GetTextMetricsA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateFontA
GetObjectA
CreatePen
GetBkColor
GetDeviceCaps
GetCurrentObject
CreateFontIndirectA
GetTextExtentPoint32A
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateHatchBrush
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegOpenKeyExA
shell32
DragQueryFileA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetMalloc
SHAppBarMessage
ShellExecuteA
SHGetDesktopFolder
DragFinish
SHGetFileInfoA
comctl32
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathFindExtensionA
PathIsUNCA
ole32
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoCreateInstance
CoInitializeEx
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
CoRegisterMessageFilter
CreateStreamOnHGlobal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
CoTaskMemFree
oleaut32
SysAllocString
SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
SysFreeString
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SafeArrayCreateVector
SysAllocStringLen
VariantChangeType
SysAllocStringByteLen
OleCreateFontIndirect
SysStringLen
VariantCopy
VariantInit
VarBstrFromDate
VariantClear
VarUdateFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
oledlg
ord8
gdiplus
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
ws2_32
socket
inet_addr
htons
connect
closesocket
WSAStartup
WSACleanup
send
recv
WSAGetLastError
getsockopt
ioctlsocket
WSASetLastError
select
bcrypt
BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptDestroyHash
BCryptHashData
BCryptFinishHash
BCryptVerifySignature
BCryptImportKey
BCryptCloseAlgorithmProvider
BCryptDecrypt
BCryptSetProperty
BCryptImportKeyPair
BCryptDestroyKey
BCryptSignHash
BCryptCreateHash
BCryptGetProperty
BCryptEncrypt
crypt32
CryptDecodeObjectEx
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ