Static task
static1
Behavioral task
behavioral1
Sample
dbbb15d43931b1a5d51021eefec5a0036610b41db5aa19f6939cefaf563fc254.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
dbbb15d43931b1a5d51021eefec5a0036610b41db5aa19f6939cefaf563fc254.exe
Resource
win10v2004-20231025-en
General
-
Target
dbbb15d43931b1a5d51021eefec5a0036610b41db5aa19f6939cefaf563fc254
-
Size
640KB
-
MD5
35c021258c28485c4ef4676b2a2b1d4e
-
SHA1
c88e8d6f550fe17822b8dd99d101ea36592847b6
-
SHA256
dbbb15d43931b1a5d51021eefec5a0036610b41db5aa19f6939cefaf563fc254
-
SHA512
a0fbd25781c97adee219aa9bf1b718013f479de8d9758dabaa126bc6bcc2321458d535690faf7e9cdaaf68635a5f56ed109f45bae591318c5d1fd3527d8ea898
-
SSDEEP
6144:19jNvKNnIkvuSTFYqeHqA6zewYjaY8ikNFc1jtRmYsXJnKT:1DvklRYqeKA6ywYjaY8ik/2xtT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbbb15d43931b1a5d51021eefec5a0036610b41db5aa19f6939cefaf563fc254
Files
-
dbbb15d43931b1a5d51021eefec5a0036610b41db5aa19f6939cefaf563fc254.exe windows:6 windows x64
80833f459d43157c3c7de5844f06bdf6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msi
ord173
kernel32
ExpandEnvironmentStringsW
WriteFile
GetEnvironmentVariableW
MultiByteToWideChar
WideCharToMultiByte
MulDiv
GetModuleHandleW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
FlushFileBuffers
GetModuleFileNameW
lstrcmpiW
LoadLibraryExW
InitializeCriticalSectionEx
RaiseException
SetThreadLocale
GetSystemDefaultLCID
DecodePointer
lstrlenW
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetExitCodeThread
CreateThread
WaitForSingleObject
OpenProcess
GetExitCodeProcess
Sleep
CreateProcessW
GetCommandLineW
AddDllDirectory
CreateEventW
SetEvent
GlobalMemoryStatus
SetEnvironmentVariableW
SetCurrentDirectoryW
GetTimeFormatW
GetDateFormatW
GetUserDefaultLangID
VerifyVersionInfoW
VerSetConditionMask
CompareStringW
LCMapStringW
FlsFree
FlsSetValue
FindClose
FlsAlloc
FreeEnvironmentStringsW
ReadFile
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlPcToFileHeader
RtlUnwindEx
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
VirtualFree
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
SetStdHandle
GetStringTypeW
SetFilePointerEx
GetConsoleOutputCP
GetConsoleMode
GetFileSize
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
GetProcessHeap
CreateDirectoryW
DeleteFileW
RemoveDirectoryW
FindNextFileW
SetLastError
GetFullPathNameW
GetEnvironmentStringsW
FindFirstFileW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
WriteConsoleW
FlsGetValue
user32
SetCursor
TrackMouseEvent
SetFocus
SetCapture
GetSysColor
ReleaseCapture
GetDlgCtrlID
IsWindowEnabled
FillRect
MessageBoxW
GetFocus
GetCapture
DrawFocusRect
GetCursorPos
ScreenToClient
PtInRect
SetRectEmpty
GetClassNameW
SystemParametersInfoW
GetWindowTextLengthW
GetWindowTextW
DrawTextW
EnableWindow
DialogBoxParamW
DispatchMessageW
TranslateMessage
UpdateWindow
PeekMessageW
GetActiveWindow
GetMessageW
RegisterWindowMessageW
PostThreadMessageW
EndPaint
BeginPaint
LoadCursorW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
GetWindowLongPtrW
GetSystemMetrics
SetWindowLongPtrW
InvalidateRect
RedrawWindow
IsWindowVisible
ShowWindow
EndDialog
CreateWindowExW
IsWindow
SendMessageW
SetWindowLongW
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
MapWindowPoints
SetWindowPos
SetWindowTextW
GetDlgItem
UnregisterClassW
DestroyWindow
DefWindowProcW
CharNextW
ReleaseDC
GetClientRect
GetDC
LoadStringW
OffsetRect
gdi32
SetTextColor
GetStockObject
CreateFontIndirectW
GetObjectW
BitBlt
SelectObject
CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
DeleteObject
SetBkMode
advapi32
CryptHashData
CryptAcquireContextW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey
CryptDestroyKey
CryptDeriveKey
CryptCreateHash
CryptReleaseContext
CryptGetHashParam
CryptDecrypt
CryptDestroyHash
shell32
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
oleaut32
VarUI4FromStr
shlwapi
PathIsUNCW
Sections
.text Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 273KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ