Static task
static1
Behavioral task
behavioral1
Sample
6117c8b5cebc4b8cb7a61f9faed991a55065db859378d0360b4a10a30e629f57.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
6117c8b5cebc4b8cb7a61f9faed991a55065db859378d0360b4a10a30e629f57.exe
Resource
win10v2004-20231025-en
General
-
Target
6117c8b5cebc4b8cb7a61f9faed991a55065db859378d0360b4a10a30e629f57
-
Size
3.5MB
-
MD5
5acf99cec6b2092cee32fe25317ee98c
-
SHA1
fe13c37eb828af461c25e91146f9c12b1f94cd43
-
SHA256
6117c8b5cebc4b8cb7a61f9faed991a55065db859378d0360b4a10a30e629f57
-
SHA512
6212d0ce718b88d017ef9481d3ab39fcdbf12a259077815fb242530c758566fb7e354c01ba11242e6b69d5f042883cb2a34b42eadafeac61b3da53c005c533dc
-
SSDEEP
98304:R8is4m5IgVPURwzdvxA4XCY8HSFda9xXFLOAkGkzdnEVomFHKnPSx:Gink8RMZda9xXFLOyomFHKnPS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6117c8b5cebc4b8cb7a61f9faed991a55065db859378d0360b4a10a30e629f57
Files
-
6117c8b5cebc4b8cb7a61f9faed991a55065db859378d0360b4a10a30e629f57.exe windows:6 windows x86
f0299137bbb5966044d5600028824b3d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetStringTypeW
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
SetConsoleCtrlHandler
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
RtlUnwind
OutputDebugStringW
GetTimeZoneInformation
GetDriveTypeW
ReadConsoleW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateFileW
GetCurrentDirectoryW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteConsoleW
FindFirstFileExW
GetTempFileNameA
GetWindowsDirectoryA
SearchPathA
GetProfileIntA
GetTickCount
GetFileTime
GetFileSizeEx
GetFileAttributesExA
SetErrorMode
FindResourceExW
lstrcmpiA
DuplicateHandle
GetVolumeInformationA
WriteFile
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
FlushFileBuffers
GetTempPathA
SetFilePointer
GetACP
GetFileSize
GetFileAttributesA
CreateFileA
DeleteFileA
GetCurrentDirectoryA
GetThreadLocale
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
ResumeThread
SetThreadPriority
WaitForSingleObject
SetEvent
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetVersionExA
GetCurrentThread
GetCurrentProcessId
CopyFileA
FormatMessageA
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
MulDiv
CompareStringA
MultiByteToWideChar
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
SetLastError
OutputDebugStringA
Sleep
CreateThread
CreateDirectoryA
TerminateThread
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetProcessTimes
CloseHandle
WaitForSingleObjectEx
K32GetProcessMemoryInfo
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
FindResourceW
LoadResource
LockResource
SizeofResource
GetFullPathNameW
WideCharToMultiByte
user32
CharNextA
KillTimer
SetTimer
DeleteMenu
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
GetAsyncKeyState
CopyImage
RealChildWindowFromPoint
GetMenuItemInfoA
DestroyMenu
InvalidateRect
SetCursor
ShowOwnedPopups
TranslateMessage
GetCursorPos
EnumDisplayMonitors
SystemParametersInfoA
LoadCursorW
LoadCursorA
SetRectEmpty
SetLayeredWindowAttributes
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
DrawIconEx
IsRectEmpty
OffsetRect
DrawFocusRect
GetSysColorBrush
SetWindowRgn
DrawStateA
DrawFrameControl
DrawEdge
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
GetWindowThreadProcessId
ClientToScreen
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
RemoveMenu
InsertMenuA
GetMenuState
GetMenuStringA
IntersectRect
InflateRect
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CopyAcceleratorTableA
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
EnableScrollBar
GetClassNameA
GetParent
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
GetDoubleClickTime
GetIconInfo
CopyIcon
GetMenuDefaultItem
SetMenuDefaultItem
ModifyMenuA
RedrawWindow
DestroyAcceleratorTable
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetCapture
GetKeyState
InvalidateRgn
SetRect
GetNextDlgGroupItem
MessageBeep
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DestroyIcon
LoadImageA
LoadImageW
SetParent
MonitorFromPoint
TrackMouseEvent
GetFocus
SetFocus
IsZoomed
CharUpperA
LoadMenuW
NotifyWinEvent
SetCursorPos
UnionRect
BringWindowToTop
CreatePopupMenu
SetClassLongA
GetUpdateRect
GetWindowRgn
DestroyCursor
InvertRect
HideCaret
CreateMenu
EnableWindow
FillRect
GetSysColor
SendMessageA
UnregisterClassA
LoadIconW
GetSystemMenu
AppendMenuA
GetWindowRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetMessageA
DispatchMessageA
PostThreadMessageA
IsWindow
GetKeyNameTextA
MapVirtualKeyA
GetDC
ReleaseDC
CopyRect
RegisterWindowMessageA
PeekMessageA
GetMessagePos
GetMessageTime
PostMessageA
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
GetComboBoxInfo
EndDeferWindowPos
IsWindowVisible
GetDlgItem
GetDlgCtrlID
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
LockWindowUpdate
MapVirtualKeyExA
IsCharLowerA
IsClipboardFormatAvailable
FrameRect
CharUpperBuffA
SubtractRect
RegisterClipboardFormatA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
UpdateLayeredWindow
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
GetTopWindow
GetKeyboardLayout
gdi32
CreateDCA
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreateSolidBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
CopyMetaFileA
ScaleViewportExtEx
ScaleWindowExtEx
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
GetTextExtentPoint32A
CreatePolygonRgn
Polygon
Polyline
GetTextMetricsA
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetRgnBox
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceA
DPtoLP
ExtTextOutA
SetRectRgn
GetMapMode
GetDeviceCaps
DeleteObject
CreateRectRgn
CreatePatternBrush
CreateFontIndirectA
CombineRgn
CreateBitmap
GetObjectA
SetTextColor
SetBkColor
PatBlt
CreateRectRgnIndirect
OffsetWindowOrgEx
Rectangle
DeleteDC
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
shell32
SHGetPathFromIDListA
DragQueryFileA
DragFinish
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
ShellExecuteA
SHGetFileInfoA
SHBrowseForFolderA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
PathFileExistsA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA
uxtheme
OpenThemeData
CloseThemeData
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
DrawThemeText
IsAppThemed
DrawThemeParentBackground
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
ole32
CoInitializeEx
CoRevokeClassObject
CoRegisterMessageFilter
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
oleaut32
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
SafeArrayDestroy
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
SysAllocStringByteLen
SysStringLen
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
oledlg
ord8
gdiplus
GdipCreateBitmapFromHBITMAP
GdipGetImagePaletteSize
GdipCreateFromHDC
GdipFree
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipSetInterpolationMode
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdiplusStartup
GdipDrawImageI
GdipGetImageWidth
GdipDeleteGraphics
GdipGetImageHeight
GdipGetImagePixelFormat
GdiplusShutdown
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipBitmapLockBits
GdipDrawImageRectI
avcodec-58
av_bsf_alloc
av_bsf_free
av_bsf_get_by_name
av_bsf_get_class
av_bsf_init
av_bsf_iterate
av_bsf_receive_packet
av_bsf_send_packet
av_codec_is_decoder
av_codec_is_encoder
av_codec_next
av_copy_packet_side_data
av_get_audio_frame_duration
av_get_exact_bits_per_sample
av_init_packet
av_packet_get_side_data
av_packet_make_refcounted
av_packet_move_ref
av_packet_new_side_data
av_packet_rescale_ts
av_packet_unref
avcodec_alloc_context3
avcodec_close
avcodec_copy_context
avcodec_decode_subtitle2
avcodec_default_get_buffer2
avcodec_descriptor_get
avcodec_descriptor_get_by_name
avcodec_descriptor_next
avcodec_encode_subtitle
avcodec_find_best_pix_fmt_of_2
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_flush_buffers
avcodec_free_context
avcodec_get_class
avcodec_get_hw_config
avcodec_get_name
avcodec_open2
avcodec_parameters_alloc
avcodec_parameters_copy
avcodec_parameters_free
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_receive_packet
avcodec_send_frame
avcodec_send_packet
avsubtitle_free
avfilter-7
av_buffersink_get_channel_layout
av_buffersink_get_channels
av_buffersink_get_format
av_buffersink_get_frame_flags
av_buffersink_get_frame_rate
av_buffersink_get_h
av_buffersink_get_hw_frames_ctx
av_buffersink_get_sample_aspect_ratio
av_buffersink_get_sample_rate
av_buffersink_get_time_base
av_buffersink_get_type
av_buffersink_get_w
av_buffersink_set_frame_size
av_buffersrc_add_frame
av_buffersrc_add_frame_flags
av_buffersrc_close
av_buffersrc_get_nb_failed_requests
av_buffersrc_parameters_alloc
av_buffersrc_parameters_set
av_filter_iterate
avfilter_get_by_name
avfilter_get_class
avfilter_graph_alloc
avfilter_graph_alloc_filter
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_free
avfilter_graph_parse2
avfilter_graph_request_oldest
avfilter_graph_set_auto_convert
avfilter_init_str
avfilter_inout_free
avfilter_link
avfilter_pad_count
avfilter_pad_get_name
avfilter_pad_get_type
avformat-58
av_codec_get_id
av_codec_get_tag2
av_demuxer_iterate
av_dump_format
av_filename_number_test
av_find_input_format
av_guess_codec
av_guess_format
av_guess_frame_rate
av_interleaved_write_frame
av_muxer_iterate
av_new_program
av_pkt_dump_log2
av_program_add_stream_index
av_read_frame
av_sdp_create
av_seek_frame
av_stream_get_codec_timebase
av_stream_get_end_pts
av_stream_get_parser
av_stream_get_side_data
av_stream_new_side_data
av_write_trailer
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_get_class
avformat_match_stream_specifier
avformat_network_deinit
avformat_network_init
avformat_new_stream
avformat_open_input
avformat_query_codec
avformat_seek_file
avformat_transfer_internal_stream_timing_info
avformat_write_header
avio_check
avio_close
avio_close_dyn_buf
avio_closep
avio_enum_protocols
avio_find_protocol_name
avio_flush
avio_open
avio_open2
avio_open_dyn_buf
avio_printf
avio_r8
avio_read
avio_seek
avio_size
avio_w8
avio_write
avutil-56
av_add_q
av_asprintf
av_bprint_chars
av_bprint_finalize
av_bprint_init
av_bprintf
av_buffer_ref
av_buffer_unref
av_calloc
av_compare_ts
av_default_item_name
av_dict_copy
av_dict_free
av_dict_get
av_dict_parse_string
av_dict_set
av_dict_set_int
av_display_rotation_get
av_display_rotation_set
av_expr_eval
av_expr_free
av_expr_parse
av_fifo_alloc
av_fifo_freep
av_fifo_generic_read
av_fifo_generic_write
av_fifo_realloc2
av_fifo_size
av_fifo_space
av_find_nearest_q_idx
av_fopen_utf8
av_force_cpu_flags
av_frame_alloc
av_frame_clone
av_frame_copy_props
av_frame_free
av_frame_get_buffer
av_frame_move_ref
av_frame_ref
av_frame_remove_side_data
av_frame_unref
av_free
av_freep
av_get_bits_per_pixel
av_get_bytes_per_sample
av_get_channel_description
av_get_channel_layout
av_get_channel_layout_nb_channels
av_get_channel_layout_string
av_get_channel_name
av_get_cpu_flags
av_get_default_channel_layout
av_get_known_color_name
av_get_media_type_string
av_get_picture_type_char
av_get_pix_fmt
av_get_pix_fmt_name
av_get_sample_fmt
av_get_sample_fmt_name
av_get_sample_fmt_string
av_get_standard_channel_layout
av_get_token
av_gettime_relative
av_hwdevice_ctx_create
av_hwdevice_ctx_create_derived
av_hwdevice_find_type_by_name
av_hwdevice_get_type_name
av_hwdevice_iterate_types
av_hwframe_ctx_alloc
av_hwframe_ctx_init
av_hwframe_transfer_data
av_log
av_log2
av_log_default_callback
av_log_format_line
av_log_get_flags
av_log_get_level
av_log_set_callback
av_log_set_flags
av_log_set_level
av_malloc
av_malloc_array
av_mallocz
av_mallocz_array
av_max_alloc
av_mul_q
av_opt_child_class_next
av_opt_eval_flags
av_opt_eval_int
av_opt_find
av_opt_get_key_value
av_opt_next
av_opt_set
av_opt_set_dict
av_opt_set_from_string
av_opt_set_int
av_opt_show2
av_parse_cpu_caps
av_parse_ratio
av_parse_time
av_parse_video_rate
av_parse_video_size
av_pix_fmt_desc_get
av_pix_fmt_desc_get_id
av_pix_fmt_desc_next
av_realloc_array
av_realloc_f
av_reallocp_array
av_reduce
av_rescale
av_rescale_delta
av_rescale_q
av_rescale_q_rnd
av_strcasecmp
av_strdup
av_strerror
av_strlcat
av_strlcatf
av_strlcpy
av_strndup
av_strtod
av_strtok
av_thread_message_queue_alloc
av_thread_message_queue_free
av_thread_message_queue_recv
av_thread_message_queue_send
av_thread_message_queue_set_err_recv
av_thread_message_queue_set_err_send
av_usleep
swresample-3
swr_alloc
swr_free
swr_get_class
swscale-5
sws_alloc_context
sws_freeContext
sws_get_class
sws_isSupportedInput
sws_isSupportedOutput
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ