Static task
static1
Behavioral task
behavioral1
Sample
ab19996743635ed312c698cfd7afa99c903787a3ecf25562436c5b15bb813232.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ab19996743635ed312c698cfd7afa99c903787a3ecf25562436c5b15bb813232.exe
Resource
win10v2004-20231020-en
General
-
Target
ab19996743635ed312c698cfd7afa99c903787a3ecf25562436c5b15bb813232
-
Size
1.1MB
-
MD5
b1b32810edc51f18d23e362099c81450
-
SHA1
378519a312cf6e1c7014533e283d8d5bec7e8a66
-
SHA256
ab19996743635ed312c698cfd7afa99c903787a3ecf25562436c5b15bb813232
-
SHA512
2ea1b395b3e46495fd4107e5fc58216ea760c1c3b19edb2a94575fc2760f2f8452556d3a8829f6badb46d120648cb7641c8a4e8d6afee5e683e19f3961d0d70e
-
SSDEEP
24576:CsUbQDCd00Dck+MvAaxMh5ESGJBEcY6kFF0Y3UN:HzCm0Dck+MvAaxMh5ESG/EcYlFF0NN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab19996743635ed312c698cfd7afa99c903787a3ecf25562436c5b15bb813232
Files
-
ab19996743635ed312c698cfd7afa99c903787a3ecf25562436c5b15bb813232.exe windows:6 windows x86
6fc6ef80eef5b9187e76082e6256bef7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsW
kernel32
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStdHandle
WriteFile
GetACP
HeapAlloc
InterlockedFlushSList
HeapReAlloc
GetCurrentThread
GetFileType
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
InterlockedPushEntrySList
LoadLibraryExW
RtlUnwind
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
HeapFree
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
OutputDebugStringA
SetStdHandle
HeapSize
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
ReadFile
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameW
FreeResource
GetLocalTime
GetCurrentProcessId
Sleep
CreateMutexW
SetUnhandledExceptionFilter
GetFileAttributesExW
CreateFileW
GetCurrentThreadId
WideCharToMultiByte
IsWow64Process
GetVersionExW
GlobalMemoryStatusEx
ExitThread
CreateThread
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
DecodePointer
ReadConsoleW
WriteConsoleW
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
FormatMessageW
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CompareStringW
user32
FindWindowW
UnregisterClassW
PostMessageW
AttachThreadInput
PostQuitMessage
SetWindowPos
IsZoomed
SetCursor
MessageBoxA
ReleaseDC
GetDC
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
LoadCursorW
GetWindowThreadProcessId
ScreenToClient
GetCursorPos
GetWindowRect
SetForegroundWindow
GetForegroundWindow
GetKeyState
gdi32
CreateCompatibleDC
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
CreateDIBSection
BitBlt
comdlg32
GetOpenFileNameW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shell32
ShellExecuteW
ord165
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteA
ole32
CoSetProxyBlanket
CoInitializeSecurity
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
CoCreateInstance
oleaut32
VariantClear
SafeArrayGetVartype
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
SysAllocString
SysFreeString
duilib
?SetResourceText@CControlUI@DuiLib@@UAEX_N@Z
?SetPadding@CControlUI@DuiLib@@UAEXUtagRECT@@@Z
?SetName@CControlUI@DuiLib@@UAEXPB_W@Z
?SetMouseEnabled@CControlUI@DuiLib@@UAEX_N@Z
?SetMinWidth@CControlUI@DuiLib@@UAEXH@Z
?SetMinHeight@CControlUI@DuiLib@@UAEXH@Z
?SetMaxWidth@CControlUI@DuiLib@@UAEXH@Z
?SetMaxHeight@CControlUI@DuiLib@@UAEXH@Z
?SetManager@CControlUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAV12@_N@Z
?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z
?SetInternVisible@CControlUI@DuiLib@@UAEX_N@Z
?SetFocus@CControlUI@DuiLib@@UAEXXZ
?SetFloatPercent@CControlUI@DuiLib@@UAEXUtagTPercentInfo@2@@Z
?SetFloatAlign@CControlUI@DuiLib@@UAEXI@Z
?SetFloat@CControlUI@DuiLib@@UAEX_N@Z
?SetFixedXY@CControlUI@DuiLib@@UAEXUtagSIZE@@@Z
?SetFixedWidth@CControlUI@DuiLib@@UAEXH@Z
?SetFixedHeight@CControlUI@DuiLib@@UAEXH@Z
?SetEnabled@CControlUI@DuiLib@@UAEX_N@Z
?SetDropEnable@CControlUI@DuiLib@@UAEX_N@Z
?SetDragEnable@CControlUI@DuiLib@@UAEX_N@Z
?SetCursor@CControlUI@DuiLib@@UAEXG@Z
?SetContextMenuUsed@CControlUI@DuiLib@@UAEX_N@Z
?SetAttribute@CControlUI@DuiLib@@UAEXPB_W0@Z
?PaintText@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintStatusImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintForeImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintForeColor@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBorder@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBkImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBkColor@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?SetShortcut@CControlUI@DuiLib@@UAEX_W@Z
?Move@CControlUI@DuiLib@@UAEXUtagSIZE@@_N@Z
?IsVisible@CControlUI@DuiLib@@UBE_NXZ
?IsResourceText@CControlUI@DuiLib@@UBE_NXZ
?IsMouseEnabled@CControlUI@DuiLib@@UBE_NXZ
?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ
?IsFocused@CControlUI@DuiLib@@UBE_NXZ
?IsFloat@CControlUI@DuiLib@@UBE_NXZ
?IsEnabled@CControlUI@DuiLib@@UBE_NXZ
?IsDropEnabled@CControlUI@DuiLib@@UBE_NXZ
?IsDragEnabled@CControlUI@DuiLib@@UBE_NXZ
?IsContextMenuUsed@CControlUI@DuiLib@@UBE_NXZ
?Init@CControlUI@DuiLib@@UAEXXZ
?GetY@CControlUI@DuiLib@@UBEHXZ
?GetX@CControlUI@DuiLib@@UBEHXZ
?GetWidth@CControlUI@DuiLib@@UBEHXZ
?GetUserData@CControlUI@DuiLib@@UAEABVCDuiString@2@XZ
?GetToolTipWidth@CControlUI@DuiLib@@UAEHXZ
?GetToolTip@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?GetText@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?GetTag@CControlUI@DuiLib@@UBEIXZ
?GetShortcut@CControlUI@DuiLib@@UBE_WXZ
?GetRelativePos@CControlUI@DuiLib@@UBE?AUtagRECT@@XZ
?GetPos@CControlUI@DuiLib@@UBEABUtagRECT@@XZ
?GetParent@CControlUI@DuiLib@@UBEPAV12@XZ
?GetPadding@CControlUI@DuiLib@@UBE?AUtagRECT@@XZ
?GetName@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?GetMinWidth@CControlUI@DuiLib@@UBEHXZ
?GetMinHeight@CControlUI@DuiLib@@UBEHXZ
?GetMaxWidth@CControlUI@DuiLib@@UBEHXZ
?GetMaxHeight@CControlUI@DuiLib@@UBEHXZ
?GetManager@CControlUI@DuiLib@@UBEPAVCPaintManagerUI@2@XZ
?GetHeight@CControlUI@DuiLib@@UBEHXZ
?SetText@CControlUI@DuiLib@@UAEXPB_W@Z
?SetTag@CControlUI@DuiLib@@UAEXI@Z
?SetToolTip@CControlUI@DuiLib@@UAEXPB_W@Z
?SetToolTipWidth@CControlUI@DuiLib@@UAEXH@Z
?SetUserData@CControlUI@DuiLib@@UAEXPB_W@Z
?SetVisible@CControlUI@DuiLib@@UAEX_N@Z
?Paint@CControlUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAV12@@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?GetFloatPercent@CControlUI@DuiLib@@UBE?AUtagTPercentInfo@2@XZ
?GetFloatAlign@CControlUI@DuiLib@@UBEIXZ
?GetFixedXY@CControlUI@DuiLib@@UBE?AUtagSIZE@@XZ
?GetFixedWidth@CControlUI@DuiLib@@UBEHXZ
?GetFixedHeight@CControlUI@DuiLib@@UBEHXZ
?GetCursor@CControlUI@DuiLib@@UAEGXZ
?GetClientPos@CControlUI@DuiLib@@UBE?AUtagRECT@@XZ
?FindControl@CControlUI@DuiLib@@UAEPAV12@P6GPAV12@PAV12@PAX@Z1I@Z
?Event@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?EstimateSize@CControlUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z
?DoPostPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?Activate@CControlUI@DuiLib@@UAE_NXZ
?DoPaint@CControlUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAV12@@Z
?DoEvent@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?DoInit@CControlUI@DuiLib@@UAEXXZ
?Invalidate@CControlUI@DuiLib@@QAEXXZ
?SetPos@CControlUI@DuiLib@@UAEXUtagRECT@@_N@Z
?SetTimer@CControlUI@DuiLib@@QAE_NII@Z
?GetInterface@CControlUI@DuiLib@@UAEPAXPB_W@Z
??1CControlUI@DuiLib@@UAE@XZ
??0CControlUI@DuiLib@@QAE@XZ
?KillTimer@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@I@Z
?Find@CDuiString@DuiLib@@QBEHPB_WH@Z
?Mid@CDuiString@DuiLib@@QBE?AV12@HH@Z
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??1CDuiString@DuiLib@@QAE@XZ
??BCDuiString@DuiLib@@QBEPB_WXZ
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?CompareNoCase@CDuiString@DuiLib@@QBEHPB_W@Z
?GetPaintWindow@CPaintManagerUI@DuiLib@@QBEPAUHWND__@@XZ
?GetCaptionRect@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ
?SetCaptionRect@CPaintManagerUI@DuiLib@@QAEXAAUtagRECT@@@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?Close@CWindowWnd@DuiLib@@QAEXI@Z
?SetIcon@CWindowWnd@DuiLib@@QAEXI@Z
?HandleMessage@CWindowWnd@DuiLib@@MAEJIIJ@Z
??0WindowImplBase@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?GetManagerName@WindowImplBase@DuiLib@@MAEPB_WXZ
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?GetSkinType@WindowImplBase@DuiLib@@MAE?AVCDuiString@2@XZ
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?InitResource@WindowImplBase@DuiLib@@UAEXXZ
?IsInStaticControl@WindowImplBase@DuiLib@@MAEHPAVCControlUI@2@@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?QueryControlText@WindowImplBase@DuiLib@@UAEPB_WPB_W0@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?Assign@CDuiString@DuiLib@@QAEXPB_WH@Z
?GetData@CDuiString@DuiLib@@QBEPB_WXZ
??YCDuiString@DuiLib@@QAEABV01@PB_W@Z
?GetInstance@CResourceManager@DuiLib@@SAPAV12@XZ
?Release@CResourceManager@DuiLib@@QAEXXZ
?LoadResource@CResourceManager@DuiLib@@QAEHVSTRINGorID@2@PB_W@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
?GetResourceDll@CPaintManagerUI@DuiLib@@SAPAUHINSTANCE__@@XZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPB_W@Z
?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPAXIPB_W@Z
?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPB_W_N0@Z
?SetResourceType@CPaintManagerUI@DuiLib@@SAXH@Z
?GetResourceType@CPaintManagerUI@DuiLib@@SAHXZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
Sections
.text Size: 669KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 283KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ