Static task
static1
Behavioral task
behavioral1
Sample
b33d983caca595062043eb99fc5795eb5c065a12355ed91144bec46c30f02e40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b33d983caca595062043eb99fc5795eb5c065a12355ed91144bec46c30f02e40.exe
Resource
win10v2004-20231020-en
General
-
Target
b33d983caca595062043eb99fc5795eb5c065a12355ed91144bec46c30f02e40
-
Size
1.1MB
-
MD5
56255c2c57494f79aa18b934debe5171
-
SHA1
20db2733fea33d380c13e5b899c0fda026c879d1
-
SHA256
b33d983caca595062043eb99fc5795eb5c065a12355ed91144bec46c30f02e40
-
SHA512
278dd46947d0ad1e81819607ce975e5c00b2c0bcd508290230fd867b5cd1d80fc5310fe39cd056d9bc4ff9e0a76dc233a61052eb9b7030a6112799243e9db4a0
-
SSDEEP
24576:kRe5X1n2ajTnlmQplbjLMD9Yi6PlO1wKi6aj5eG4HEXbn6TJ5gcCSGOjFRIj1zP3:MW8BUnMD9Yi6PlO1wKi6aj5eG4HEXbnb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b33d983caca595062043eb99fc5795eb5c065a12355ed91144bec46c30f02e40
Files
-
b33d983caca595062043eb99fc5795eb5c065a12355ed91144bec46c30f02e40.exe windows:4 windows x86
fda279b7c5ae6df0ec02f4634b8fd90e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapSize
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CopyFileA
TerminateProcess
GetACP
GetProfileStringA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
RtlUnwind
GetFileTime
GetTickCount
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
SizeofResource
GlobalFlags
MulDiv
SetLastError
GlobalAlloc
lstrcmpA
GetCurrentThread
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleFileNameA
WideCharToMultiByte
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
WritePrivateProfileStringA
GetFileSize
ReadFile
CreateFileMappingA
MapViewOfFile
VirtualProtect
UnmapViewOfFile
CreateFileA
WriteFile
CloseHandle
GetFileAttributesA
lstrlenA
MultiByteToWideChar
GetLastError
FormatMessageA
LocalAlloc
LocalFree
InterlockedDecrement
GetCurrentDirectoryA
LCMapStringA
user32
PostThreadMessageA
KillTimer
SetTimer
ReleaseCapture
SetCapture
InflateRect
LoadStringA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
WindowFromPoint
DestroyMenu
MapDialogRect
PtInRect
InvalidateRect
IsZoomed
SetRectEmpty
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GetDC
ReleaseDC
SetParent
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
CharNextA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
EnableWindow
SendMessageA
LoadIconA
wsprintfA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
RegisterClipboardFormatA
LockWindowUpdate
GetDCEx
CharUpperA
MessageBeep
GetNextDlgGroupItem
GetMenuCheckMarkDimensions
CopyAcceleratorTableA
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
DefDlgProcA
IsWindowUnicode
MessageBoxA
EnableMenuItem
GetSubMenu
GetMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
IsWindowEnabled
GetDlgItem
GetWindowLongA
GetParent
DestroyWindow
CreateDialogIndirectParamA
IsWindow
SetActiveWindow
GetActiveWindow
EndDialog
GetNextDlgTabItem
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
DefWindowProcA
PeekMessageA
SetRect
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
SetWindowContextHelpId
gdi32
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
GetViewportExtEx
CreateFontIndirectA
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
GetTextColor
GetBkColor
LPtoDP
BitBlt
GetDeviceCaps
CreateRectRgn
Escape
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
RestoreDC
SaveDC
CreateFontA
GetCharWidthA
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
StretchDIBits
DeleteDC
GetTextMetricsA
SelectObject
GetTextExtentPoint32A
CreateRectRgnIndirect
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetTextExtentPointA
CreateDIBitmap
GetClipBox
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
comctl32
ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
olepro32
ord253
oleaut32
VariantInit
VariantClear
SysFreeString
SysAllocString
VariantChangeType
SysAllocStringLen
VariantTimeToSystemTime
VariantCopy
SysAllocStringByteLen
SysStringLen
GetErrorInfo
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
Sections
.text Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 820KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ