Static task
static1
Behavioral task
behavioral1
Sample
8bfd7873c3c36583b3534370a21865aca457bfcd49f8979336c3386c7495cc65.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
8bfd7873c3c36583b3534370a21865aca457bfcd49f8979336c3386c7495cc65.exe
Resource
win10v2004-20231020-en
General
-
Target
8bfd7873c3c36583b3534370a21865aca457bfcd49f8979336c3386c7495cc65
-
Size
10.8MB
-
MD5
b386452f2744a26239be3502b5979235
-
SHA1
aabc90f851ccbfd97b7a8b1d820b7877693be96d
-
SHA256
8bfd7873c3c36583b3534370a21865aca457bfcd49f8979336c3386c7495cc65
-
SHA512
5ff9d312849b5379d599259c4f2fac013c60f03592a74ac7d8c5bc354ab9853b170959aff387caef6baba328d52a6193d39baaced9e13166623974bd842fdc07
-
SSDEEP
98304:Xprc8IwnsPt+LQrnVgpIpUY0BhklREKkDhVFVDXygZFKAvf2Vm/KjZPEGAmin0Zd:XS+17hkwPDhVFlXf/vAAmineek0LjGB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bfd7873c3c36583b3534370a21865aca457bfcd49f8979336c3386c7495cc65
Files
-
8bfd7873c3c36583b3534370a21865aca457bfcd49f8979336c3386c7495cc65.exe windows:6 windows x86
5895b5cbeab75931217b17bc2ed9b0e1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
RtlUnwind
ExitProcess
GetACP
GetNumberFormatW
GetTimeFormatW
GetDateFormatW
lstrcpynW
EnumSystemLocalesW
GetSystemDefaultLCID
OutputDebugStringW
GetStdHandle
LCMapStringW
IsValidLocale
ReadConsoleW
GetTimeZoneInformation
GetConsoleOutputCP
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetUserDefaultLCID
GetConsoleMode
GetTempFileNameW
Sleep
SearchPathW
GetProfileIntW
GetTempPathW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
VerifyVersionInfoW
VerSetConditionMask
FindResourceExW
GetWindowsDirectoryW
MoveFileW
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
SetErrorMode
GetCurrentDirectoryW
MultiByteToWideChar
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
GetTickCount
CompareStringA
GetVersionExW
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
LoadLibraryW
GetModuleHandleA
OutputDebugStringA
GetCurrentProcessId
lstrcmpA
GetThreadLocale
FileTimeToSystemTime
SetLastError
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetProcessHeap
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
CopyFileW
InitializeCriticalSectionEx
RaiseException
DeleteCriticalSection
WaitForSingleObject
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
lstrcpyW
lstrlenW
GetProcAddress
GetModuleHandleW
GetCurrentThread
DeleteFileW
CreateFileW
CloseHandle
GetLastError
GetLongPathNameW
CreateDirectoryW
GetFileAttributesW
FindResourceW
LoadResource
LockResource
SizeofResource
GetEnvironmentVariableW
WideCharToMultiByte
SetFilePointerEx
user32
WaitMessage
LoadImageW
DestroyIcon
TrackMouseEvent
GetAsyncKeyState
CopyImage
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
GetDialogBaseUnits
IntersectRect
InflateRect
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
GetSystemMetrics
LoadMenuW
SetCursor
ShowOwnedPopups
GetCursorPos
TranslateMessage
GetMessageW
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
PostQuitMessage
OffsetRect
SetRectEmpty
SendDlgItemMessageA
IsDialogMessageW
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
SetClassLongW
SetWindowRgn
SetParent
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
DrawEdge
TrackPopupMenu
ReleaseCapture
WindowFromPoint
DeleteMenu
SetTimer
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
SetRect
IsRectEmpty
GetNextDlgGroupItem
MessageBeep
CharUpperW
CreatePopupMenu
GetMenuDefaultItem
SetMenu
GetMenu
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetCapture
DrawFrameControl
IsZoomed
GetSystemMenu
PostMessageW
IsWindow
GetWindowThreadProcessId
GetWindowTextW
SendMessageW
SetWindowTextW
EnableWindow
GetFocus
FindWindowW
IsWindowVisible
GetWindow
GetClassNameW
UnregisterClassW
MapVirtualKeyW
GetKeyNameTextW
SetLayeredWindowAttributes
LoadIconW
UpdateWindow
InvalidateRect
KillTimer
MessageBoxW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
GetWindowTextLengthW
IsWindowEnabled
GetWindowLongW
GetParent
CountClipboardFormats
GetClipboardData
SetCaretPos
GetWindowContextHelpId
IsCharAlphaNumericW
GetCaretPos
ShowCaret
DestroyCaret
GetLastActivePopup
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
FillRect
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
GetDesktopWindow
SetFocus
SetScrollPos
GetScrollPos
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsMenu
IsChild
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsIconic
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
UnionRect
UpdateLayeredWindow
GetTabbedTextExtentW
MonitorFromPoint
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
EnumChildWindows
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
SendNotifyMessageW
MonitorFromRect
CreateMenu
WindowFromDC
GetWindowRgn
EnumDisplayMonitors
GetDlgCtrlID
GetKeyState
GetCapture
DestroyCursor
TrackPopupMenuEx
gdi32
SetStretchBltMode
SetTextColor
SetTextAlign
StartDocW
SetArcDirection
ExtCreatePen
GetObjectW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
GetBkColor
GetTextColor
GetRgnBox
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
GetLayout
StretchBlt
CreateDIBSection
SetDIBColorTable
Ellipse
CreatePolygonRgn
Polygon
Polyline
SetROP2
LPtoDP
Rectangle
OffsetRgn
GetCurrentObject
GetCharWidthW
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
EndDoc
AbortDoc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateRectRgn
CreateRoundRectRgn
SetPolyFillMode
SetPixelFormat
ChoosePixelFormat
GetRegionData
PolyBezier
CreatePolyPolygonRgn
CreateEllipticRgnIndirect
Arc
UnrealizeObject
SetBrushOrgEx
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
GetDeviceCaps
CreateSolidBrush
DeleteObject
CopyMetaFileW
SetPixel
CreateEllipticRgn
CreateDCW
msimg32
TransparentBlt
AlphaBlend
winspool.drv
DeviceCapabilitiesW
ord203
ClosePrinter
DocumentPropertiesW
OpenPrinterW
EnumPrintersW
advapi32
RegQueryValueW
RegEnumKeyW
RegSetValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegDeleteValueW
RegEnumValueW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
shell32
SHGetDataFromIDListW
ExtractIconExW
DragAcceptFiles
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteExW
SHAppBarMessage
DragFinish
DragQueryFileW
ShellExecuteW
SHGetFolderPathW
comctl32
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Draw
ImageList_Add
ImageList_SetImageCount
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
InitCommonControlsEx
shlwapi
PathFindExtensionW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathIsUNCW
PathFindFileNameW
uxtheme
GetCurrentThemeName
DrawThemeText
OpenThemeData
GetThemePartSize
GetThemeSysColor
IsAppThemed
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
CloseThemeData
GetThemeColor
DrawThemeBackground
DrawThemeParentBackground
ole32
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateFileMoniker
OleLockRunning
OleSetMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitializeEx
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleRun
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoInitialize
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
OleDraw
OleCreate
oleaut32
VarBstrFromDate
VariantCopy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
SysStringLen
SysAllocString
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
VarBstrCmp
VarUdateFromDate
VariantChangeTypeEx
OleCreateFontIndirect
LoadTypeLi
SafeArrayDestroy
oledlg
OleUIBusyW
OleUIInsertObjectW
OleUIPasteSpecialW
OleUIObjectPropertiesW
gdiplus
GdipStartPathFigure
GdipClosePathFigure
GdipAddPathLine
GdipAddPathLine2
GdipAddPathArc
GdipAddPathBezier
GdipAddPathRectangle
GdipAddPathEllipse
GdipAddPathPath
GdipTransformPath
GdipGetPathWorldBounds
GdipCreateMatrix
GdipDeleteMatrix
GdipSetMatrixElements
GdipMultiplyMatrix
GdipTranslateMatrix
GdipScaleMatrix
GdipRotateMatrix
GdipTransformMatrixPoints
GdipGetMatrixElements
GdipIsMatrixIdentity
GdipCloneRegion
GdipCombineRegionPath
GdipCombineRegionRegion
GdipGetRegionHRgn
GdipGetBrushType
GdipGetTextureTransform
GdipSetTextureTransform
GdipTranslateTextureTransform
GdipSetLinePresetBlend
GdipSetLineWrapMode
GdipGetLineTransform
GdipSetLineTransform
GdipMultiplyLineTransform
GdipTranslateLineTransform
GdipScaleLineTransform
GdipRotateLineTransform
GdipSetPathGradientCenterColor
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterPoint
GdipGetPathGradientPointCount
GdipSetPathGradientPresetBlend
GdipSetPathGradientWrapMode
GdipGetPathGradientTransform
GdipSetPathGradientTransform
GdipMultiplyPathGradientTransform
GdipTranslatePathGradientTransform
GdipScalePathGradientTransform
GdipSetPenStartCap
GdipSetPenEndCap
GdipSetPenDashCap197819
GdipSetPenLineJoin
GdipSetPenMiterLimit
GdipSetPenDashStyle
GdipSetPenDashOffset
GdipSetPenDashArray
GdipCloneBitmapArea
GdipSetImageAttributesColorMatrix
GdipSetCompositingMode
GdipGetCompositingMode
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipDeletePath
GdipGetInterpolationMode
GdipSetWorldTransform
GdipResetWorldTransform
GdipMultiplyWorldTransform
GdipGetWorldTransform
GdipSetPageUnit
GdipGetDpiY
GdipDrawLine
GdipDrawArc
GdipDrawRectangle
GdipDrawEllipse
GdipDrawPath
GdipGraphicsClear
GdipFillRectangle
GdipFillEllipse
GdipFillPath
GdipFillRegion
GdipDrawImageRectRect
GdipSetClipPath
GdipSetClipRegion
GdipResetClip
GdipDeleteFontFamily
GdipGetEmHeight
GdipGetCellDescent
GdipGetFamily
GdipGetFontStyle
GdipGetFontSize
GdipDrawString
GdipMeasureString
GdipSetStringFormatFlags
GdipGetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateRegionPath
GdipDeleteRegion
GdipCloneBrush
GdipDeleteBrush
GdipCreateTextureIAI
GdipSetTextureWrapMode
GdipCreateSolidFill
GdipCreateLineBrush
GdipCreatePathGradientFromPath
GdipCreatePen2
GdipDeletePen
GdipCreateBitmapFromHICON
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteFont
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreatePath
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipSetPathFillMode
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipSetPixelOffsetMode
GdipDisposeImage
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
winmm
PlaySoundW
comdlg32
GetFileTitleW
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 523KB - Virtual size: 523KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ