Static task
static1
Behavioral task
behavioral1
Sample
dd476a72e272dff6d6ab2c6b01db56b14e8926bbac7d15e8d0e0f6f116831b52.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
dd476a72e272dff6d6ab2c6b01db56b14e8926bbac7d15e8d0e0f6f116831b52.exe
Resource
win10v2004-20231023-en
General
-
Target
dd476a72e272dff6d6ab2c6b01db56b14e8926bbac7d15e8d0e0f6f116831b52
-
Size
12.2MB
-
MD5
9335770a8123683356a9792eecf58361
-
SHA1
e9b3e88740078512602f717b58e5fd5c849b6d40
-
SHA256
dd476a72e272dff6d6ab2c6b01db56b14e8926bbac7d15e8d0e0f6f116831b52
-
SHA512
4dcd34154a27a03a8bea555d9d49ba39cbd480b858ac998cb29a57b463e90ffa75133eed249959277443c149e7ea34214ccce02387e64b4e94937533a0106905
-
SSDEEP
98304:pcH1uQ2ye2EuFs50rqwGaEzmMQv3XV6V7Q1m2tTx48/Z0mSae1hMAM3kLhPT6PMR:FQ8b50rbfpeNhc3kpLjG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd476a72e272dff6d6ab2c6b01db56b14e8926bbac7d15e8d0e0f6f116831b52
Files
-
dd476a72e272dff6d6ab2c6b01db56b14e8926bbac7d15e8d0e0f6f116831b52.exe windows:6 windows x64
34cdde783f4b6d0d057404dc746fe6fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetTimeZoneInformation
ReadConsoleW
GetCPInfo
SetFilePointerEx
IsValidLocale
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
FindFirstFileExW
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
RtlUnwind
RtlPcToFileHeader
RtlUnwindEx
ExitProcess
GetACP
GetNumberFormatW
GetTimeFormatW
GetDateFormatW
lstrcpynW
EnumSystemLocalesW
GetSystemDefaultLCID
OutputDebugStringW
GetConsoleOutputCP
FindNextFileW
IsValidCodePage
FreeLibraryAndExitThread
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetUserDefaultLCID
GetTempFileNameW
Sleep
SearchPathW
GetOEMCP
GetProfileIntW
GetTempPathW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
VerifyVersionInfoW
VerSetConditionMask
FindResourceExW
GetWindowsDirectoryW
MoveFileW
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
SetErrorMode
GetCurrentDirectoryW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
MultiByteToWideChar
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
GetTickCount
CompareStringA
GetVersionExW
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
OutputDebugStringA
GetCurrentProcessId
lstrcmpA
GetThreadLocale
FileTimeToSystemTime
SetLastError
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetProcessHeap
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
CopyFileW
InitializeCriticalSectionEx
RaiseException
DeleteCriticalSection
WaitForSingleObject
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
lstrcpyW
lstrlenW
GetProcAddress
GetModuleHandleW
GetCurrentThread
DeleteFileW
CreateFileW
CloseHandle
GetLastError
GetLongPathNameW
CreateDirectoryW
GetFileAttributesW
FindResourceW
LoadResource
LockResource
SizeofResource
GetEnvironmentVariableW
WideCharToMultiByte
GetConsoleMode
user32
WaitMessage
LoadImageW
DestroyIcon
TrackMouseEvent
GetAsyncKeyState
CopyImage
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
GetDialogBaseUnits
IntersectRect
InflateRect
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
GetSystemMetrics
LoadMenuW
SetCursor
ShowOwnedPopups
GetCursorPos
TranslateMessage
GetMessageW
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
PostQuitMessage
OffsetRect
SetRectEmpty
SendDlgItemMessageA
IsDialogMessageW
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
SetCapture
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
SetClassLongPtrW
SetWindowRgn
SetParent
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetRect
IsRectEmpty
GetNextDlgGroupItem
DrawEdge
MessageBeep
CharUpperW
CreatePopupMenu
GetMenuDefaultItem
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
ReleaseCapture
ValidateRect
SetForegroundWindow
WindowFromPoint
DeleteMenu
SetTimer
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
WinHelpW
NotifyWinEvent
DrawFrameControl
IsZoomed
GetSystemMenu
PostMessageW
IsWindow
GetWindowThreadProcessId
GetWindowTextW
SendMessageW
SetWindowTextW
EnableWindow
GetFocus
FindWindowW
IsWindowVisible
GetWindow
GetClassNameW
UnregisterClassW
MapVirtualKeyW
GetKeyNameTextW
SetLayeredWindowAttributes
LoadIconW
UpdateWindow
InvalidateRect
KillTimer
MessageBoxW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
GetWindowTextLengthW
IsWindowEnabled
GetWindowLongW
GetParent
CountClipboardFormats
GetClipboardData
SetCaretPos
GetWindowContextHelpId
IsCharAlphaNumericW
SetClassLongW
GetClassLongW
GetCaretPos
ShowCaret
DestroyCaret
GetLastActivePopup
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
FillRect
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
GetDesktopWindow
SetFocus
SetScrollPos
GetScrollPos
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsMenu
IsChild
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
UnionRect
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
GetTabbedTextExtentW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
EnumChildWindows
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
SendNotifyMessageW
MonitorFromRect
CreateMenu
WindowFromDC
GetWindowRgn
InvalidateRgn
EndDeferWindowPos
IsIconic
GetDlgCtrlID
GetKeyState
GetCapture
GetMenu
SetMenu
TrackPopupMenu
TrackPopupMenuEx
GetForegroundWindow
DestroyCursor
EnumDisplayMonitors
gdi32
SetStretchBltMode
SetTextColor
SetTextAlign
StartDocW
SetArcDirection
ExtCreatePen
GetObjectW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
GetBkColor
GetTextColor
GetRgnBox
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
GetLayout
StretchBlt
CreateDIBSection
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
OffsetRgn
SetROP2
GetCharWidthW
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
EndDoc
AbortDoc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateSolidBrush
DeleteObject
GetCurrentObject
SetPolyFillMode
SetPixelFormat
ChoosePixelFormat
GetRegionData
PolyBezier
CreatePolyPolygonRgn
CreateEllipticRgnIndirect
Arc
UnrealizeObject
SetBrushOrgEx
CopyMetaFileW
CreateDCW
GetDeviceCaps
BitBlt
SetPixel
SetDIBColorTable
CreateBitmap
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesW
DeviceCapabilitiesW
ord203
OpenPrinterW
EnumPrintersW
advapi32
RegSetValueW
RegQueryValueW
RegEnumKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
shell32
SHGetDataFromIDListW
ExtractIconExW
DragAcceptFiles
SHGetMalloc
ShellExecuteExW
SHAppBarMessage
DragFinish
DragQueryFileW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
comctl32
ImageList_Remove
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Draw
ImageList_Add
ImageList_SetImageCount
ImageList_ReplaceIcon
InitCommonControlsEx
shlwapi
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
StrFormatKBSizeW
PathRemoveFileSpecW
uxtheme
DrawThemeBackground
DrawThemeText
OpenThemeData
GetThemePartSize
GetThemeSysColor
IsAppThemed
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor
CloseThemeData
DrawThemeParentBackground
ole32
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateFileMoniker
OleLockRunning
OleSetMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitializeEx
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleRun
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoInitialize
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
OleDraw
OleCreate
oleaut32
VarBstrFromDate
VariantCopy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
SysStringLen
SysAllocString
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
VarBstrCmp
VarUdateFromDate
VariantChangeTypeEx
OleCreateFontIndirect
LoadTypeLi
oledlg
OleUIBusyW
OleUIInsertObjectW
OleUIPasteSpecialW
OleUIObjectPropertiesW
gdiplus
GdipAddPathEllipse
GdipAddPathPath
GdipTransformPath
GdipGetPathWorldBounds
GdipCreateMatrix
GdipDeleteMatrix
GdipSetMatrixElements
GdipMultiplyMatrix
GdipTranslateMatrix
GdipScaleMatrix
GdipRotateMatrix
GdipTransformMatrixPoints
GdipGetMatrixElements
GdipIsMatrixIdentity
GdipCloneRegion
GdipCombineRegionPath
GdipCombineRegionRegion
GdipGetRegionHRgn
GdipGetBrushType
GdipGetTextureTransform
GdipSetTextureTransform
GdipTranslateTextureTransform
GdipSetLinePresetBlend
GdipSetLineWrapMode
GdipGetLineTransform
GdipSetLineTransform
GdipMultiplyLineTransform
GdipTranslateLineTransform
GdipScaleLineTransform
GdipRotateLineTransform
GdipSetPathGradientCenterColor
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterPoint
GdipGetPathGradientPointCount
GdipSetPathGradientPresetBlend
GdipSetPathGradientWrapMode
GdipGetPathGradientTransform
GdipSetPathGradientTransform
GdipMultiplyPathGradientTransform
GdipTranslatePathGradientTransform
GdipScalePathGradientTransform
GdipSetPenStartCap
GdipSetPenEndCap
GdipSetPenDashCap197819
GdipSetPenLineJoin
GdipSetPenMiterLimit
GdipSetPenDashStyle
GdipSetPenDashOffset
GdipSetPenDashArray
GdipCloneBitmapArea
GdipSetImageAttributesColorMatrix
GdipSetCompositingMode
GdipGetCompositingMode
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipSetPixelOffsetMode
GdipGetInterpolationMode
GdipSetWorldTransform
GdipResetWorldTransform
GdipMultiplyWorldTransform
GdipGetWorldTransform
GdipSetPageUnit
GdipAddPathBezier
GdipDrawLine
GdipDrawArc
GdipDrawRectangle
GdipDrawEllipse
GdipDrawPath
GdipGraphicsClear
GdipFillRectangle
GdipFillEllipse
GdipFillPath
GdipFillRegion
GdipDrawImageRectRect
GdipSetClipPath
GdipSetClipRegion
GdipResetClip
GdipDeleteFontFamily
GdipGetEmHeight
GdipGetCellDescent
GdipGetFamily
GdipGetFontStyle
GdipGetFontSize
GdipDrawString
GdipMeasureString
GdipSetStringFormatFlags
GdipGetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateRegionPath
GdipDeleteRegion
GdipCloneBrush
GdipDeleteBrush
GdipCreateTextureIAI
GdipSetTextureWrapMode
GdipCreateSolidFill
GdipCreateLineBrush
GdipCreatePathGradientFromPath
GdipCreatePen2
GdipDeletePen
GdipCreateBitmapFromHICON
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteFont
GdipCreateStringFormat
GdipDeleteStringFormat
GdipAddPathArc
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipAddPathLine2
GdipAddPathLine
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipClosePathFigure
GdipStartPathFigure
GdipSetPathFillMode
GdipAddPathRectangle
GdipDeletePath
GdipCreatePath
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetDpiY
GdipCreateBitmapFromStream
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundW
comdlg32
GetFileTitleW
Sections
.text Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 361KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ