Static task
static1
Behavioral task
behavioral1
Sample
9519a3d69e08c5e3b70fe7de48c6045445e9bf11d2980f5245a9302d6fe3949c.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
9519a3d69e08c5e3b70fe7de48c6045445e9bf11d2980f5245a9302d6fe3949c.exe
Resource
win10v2004-20231023-en
General
-
Target
9519a3d69e08c5e3b70fe7de48c6045445e9bf11d2980f5245a9302d6fe3949c
-
Size
6.2MB
-
MD5
59df5c1407f84a9aff677a46326b80cb
-
SHA1
425b6ad1956c9cbe2942be0e8a4aa6883bc81460
-
SHA256
9519a3d69e08c5e3b70fe7de48c6045445e9bf11d2980f5245a9302d6fe3949c
-
SHA512
6876cb4c9bf29382ce504ab7be1e3227a3515bc612b33767a11b36b8b39e7ae7d6bb9e7dab0680f304bd1ff7626b128d62bbba99e858a03ff8c05ca8b785173d
-
SSDEEP
98304:ilkHIfaGGIbBmxi9hMz0L0iIFVas3C+00PaDq1QnKlwYQIYNx1F/Zuyq/fGur:SkHI/0z0QiI7T00b3QIYNx1S/+u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9519a3d69e08c5e3b70fe7de48c6045445e9bf11d2980f5245a9302d6fe3949c
Files
-
9519a3d69e08c5e3b70fe7de48c6045445e9bf11d2980f5245a9302d6fe3949c.exe windows:5 windows x86 arch:x86
75190b8f17baf8d5594118fdd35cd171
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ioctlsocket
inet_addr
sendto
inet_ntoa
WSAStartup
select
gethostbyname
__WSAFDIsSet
send
connect
recv
WSAGetLastError
closesocket
socket
recvfrom
ntohl
ntohs
htonl
htons
winmm
waveOutWrite
waveOutSetVolume
waveOutGetNumDevs
waveOutUnprepareHeader
waveOutClose
waveOutRestart
waveOutReset
waveOutOpen
waveOutPrepareHeader
waveOutGetPosition
PlaySoundW
waveInAddBuffer
waveInStart
waveInOpen
waveInUnprepareHeader
waveInGetPosition
waveInReset
waveInGetNumDevs
waveInPrepareHeader
waveInStop
waveInClose
ptt
?CreatePttEngine@@YAPAVCEngineNotifier@@PAVCPttUINotifier@@@Z
?DestroyPttEngine@@YAHPAVCEngineNotifier@@@Z
libcef
cef_string_utf16_clear
cef_string_utf16_to_utf8
cef_string_utf8_to_utf16
cef_string_utf8_clear
cef_string_utf16_set
cef_string_utf16_cmp
cef_string_list_copy
cef_string_map_size
cef_string_multimap_free
cef_string_multimap_alloc
cef_string_userfree_utf16_free
cef_string_list_alloc
cef_string_list_free
cef_currently_on
cef_post_task
cef_register_extension
cef_execute_process
cef_initialize
cef_shutdown
cef_api_hash
cef_v8value_create_string
cef_v8context_get_current_context
cef_process_message_create
cef_string_map_alloc
cef_string_map_free
cef_command_line_create
cef_browser_host_create_browser
cef_string_list_size
cef_string_list_value
cef_string_list_append
cef_string_map_key
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
avcodec-57
av_free_packet
av_init_packet
av_new_packet
av_packet_unref
av_parser_close
av_parser_init
av_parser_parse2
avcodec_alloc_context3
avcodec_close
avcodec_decode_video2
avcodec_encode_audio2
avcodec_encode_video2
avcodec_fill_audio_frame
avcodec_find_decoder
avcodec_find_encoder
avcodec_free_context
avcodec_get_class
avcodec_open2
avcodec_parameters_copy
avpicture_alloc
avpicture_fill
avpicture_free
avpicture_get_size
avformat-57
av_dump_format
av_find_input_format
av_guess_format
av_interleaved_write_frame
av_read_frame
av_register_all
av_write_frame
av_write_trailer
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_match_stream_specifier
avformat_network_init
avformat_new_stream
avformat_open_input
avformat_write_header
avio_close
avio_open
avutil-55
av_compare_ts
av_dict_free
av_dict_get
av_dict_set
av_frame_alloc
av_frame_free
av_frame_unref
av_free
av_get_channel_layout_nb_channels
av_image_fill_arrays
av_image_get_buffer_size
av_int_list_length_for_size
av_log
av_malloc
av_mallocz
av_opt_find
av_opt_set_bin
av_opt_set_int
av_opt_set_sample_fmt
av_rescale_q
av_rescale_q_rnd
av_strdup
av_strerror
avdevice-57
SDL_CreateRenderer
SDL_CreateTexture
SDL_CreateThread
SDL_CreateWindowFrom
SDL_Delay
SDL_DestroyRenderer
SDL_DestroyTexture
SDL_DestroyWindow
SDL_Init
SDL_PushEvent
SDL_Quit
SDL_RenderClear
SDL_RenderCopy
SDL_RenderPresent
SDL_UpdateTexture
SDL_UpdateYUVTexture
avdevice_register_all
swscale-4
sws_freeContext
sws_getContext
sws_scale
swresample-2
swr_alloc
swr_convert
swr_init
avfilter-6
av_buffersink_params_alloc
avfilter_get_by_name
avfilter_graph_alloc
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_parse_ptr
avfilter_inout_alloc
avfilter_register_all
libcurl
curl_global_cleanup
curl_global_init
curl_version
curl_easy_getinfo
curl_slist_append
curl_easy_setopt
curl_easy_cleanup
curl_easy_init
curl_easy_perform
curl_slist_free_all
advapi32
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
GetFileSecurityW
SetFileSecurityW
RegEnumValueW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
hid
HidD_GetHidGuid
HidD_GetFeature
HidD_SetFeature
HidD_GetAttributes
HidD_FlushQueue
audiodecoder
?AudioDecoder4K@@YAHPBDHPADHAAH@Z
?CreateAudioDecoder@@YAHXZ
?AudioDecoder8K@@YAHPBDHPADHAAH@Z
libxl
xlCreateBookW
psapi
GetModuleFileNameExW
kernel32
GetStringTypeW
GetCPInfo
LCMapStringW
SetFilePointerEx
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
FindFirstFileExW
SwitchToThread
VirtualQuery
VirtualAlloc
QueryPerformanceFrequency
GetDriveTypeW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetFileType
WriteConsoleW
SetConsoleCtrlHandler
GetCommandLineA
SizeofResource
InterlockedExchange
HeapFree
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
HeapSize
GetLastError
LockResource
HeapReAlloc
RaiseException
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
SetStdHandle
GetModuleHandleW
FindFirstFileW
FindNextFileW
FindClose
GetTimeZoneInformation
InterlockedDecrement
InterlockedIncrement
SetThreadPriority
WaitForSingleObject
TerminateThread
CloseHandle
CreateThread
Sleep
CopyFileW
MultiByteToWideChar
CreateDirectoryA
CreateDirectoryW
GetModuleFileNameA
CompareStringW
GetModuleFileNameW
CopyFileA
GetCommandLineW
GetCurrentProcess
lstrlenW
CreateFileW
GetCurrentThreadId
GetPrivateProfileStringW
OutputDebugStringW
LoadLibraryW
GetLocalTime
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
GetCurrentProcessId
FreeLibrary
lstrcpyW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetExitCodeProcess
SetThreadLocale
WideCharToMultiByte
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetSystemDirectoryW
lstrcpynW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
WriteFile
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
GetFileAttributesW
GetVersionExW
HeapValidate
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
DeleteFileW
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
ReleaseSemaphore
CreateSemaphoreA
CreateEventW
SetEvent
SetFileAttributesW
GetSystemTimes
OpenProcess
CreateToolhelp32Snapshot
GetTickCount64
Process32NextW
Process32FirstW
GetProcessTimes
GetLocaleInfoW
SetLastError
lstrlenA
lstrcmpA
ReleaseMutex
OpenFileMappingW
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalMemoryStatus
FlushConsoleInputBuffer
GetStdHandle
EncodePointer
FreeResource
GetModuleHandleA
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
MulDiv
GlobalSize
GlobalGetAtomNameW
GetCurrentThread
CompareStringA
ResumeThread
WritePrivateProfileStringW
GetFileTime
GetTempFileNameW
SetFileTime
ReplaceFileW
GetUserDefaultLCID
GetFileSizeEx
LocalFileTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetShortPathNameW
GetVolumeInformationW
DuplicateHandle
lstrcmpiW
MoveFileW
GetStringTypeExW
GetThreadLocale
VerSetConditionMask
VerifyVersionInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetProfileIntW
SetErrorMode
FindResourceExW
GetWindowsDirectoryW
SearchPathW
ResetEvent
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
HeapQueryInformation
GetACP
SetEnvironmentVariableA
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetConsoleCP
ReadConsoleW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateTimerQueue
SignalObjectAndWait
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
VirtualFree
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
GetProcessHeap
user32
IsWindowEnabled
SetWindowTextW
IsDialogMessageW
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetActiveWindow
ClientToScreen
SendDlgItemMessageA
SetRectEmpty
GetMenuStringW
GetMenuState
InsertMenuW
RemoveMenu
GetWindowThreadProcessId
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
BringWindowToTop
ReleaseCapture
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
DestroyMenu
InsertMenuItemW
IntersectRect
DestroyIcon
UnpackDDElParam
ReuseDDElParam
SetCapture
MessageBeep
SetCursorPos
WindowFromPoint
IsRectEmpty
CopyIcon
NotifyWinEvent
GetSystemMenu
GetMenuItemInfoW
EnableScrollBar
FrameRect
DestroyCursor
DrawStateW
PostQuitMessage
TranslateMessage
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
CharUpperW
DrawEdge
GetSysColorBrush
DrawFocusRect
DrawIconEx
EnumDisplayMonitors
CopyImage
RealChildWindowFromPoint
TrackMouseEvent
UnionRect
DeleteMenu
IsClipboardFormatAvailable
GetUpdateRect
MonitorFromPoint
RegisterClipboardFormatW
IsZoomed
GetNextDlgGroupItem
GetIconInfo
DestroyAcceleratorTable
WaitMessage
GetMenuDefaultItem
SetMenuDefaultItem
GetMenu
CharNextW
CopyAcceleratorTableW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetDoubleClickTime
ModifyMenuW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
HideCaret
InvertRect
SubtractRect
CharUpperBuffW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
TrackPopupMenu
MapVirtualKeyExW
GetComboBoxInfo
CreateMenu
GetWindowRgn
LoadImageW
IsWindow
OffsetRect
SetCursor
GetCursorPos
SetWindowRgn
MessageBoxW
GetAsyncKeyState
SetForegroundWindow
SetWindowPos
FillRect
GetSysColor
SetRect
ShowWindow
PostMessageW
CopyRect
PtInRect
wsprintfW
GetWindowLongW
GetMessagePos
CreatePopupMenu
SetWindowLongW
AppendMenuW
CloseWindow
SetParent
GetMessageW
PostThreadMessageW
GetWindowRect
IsWindowVisible
LockWindowUpdate
LoadCursorW
UpdateWindow
InvalidateRect
SendMessageW
GetSystemMetrics
UnregisterClassW
DrawIcon
SetTimer
LoadIconW
GetClientRect
KillTimer
RegisterWindowMessageW
IsIconic
EnableWindow
GetCapture
GetMenuItemCount
GetMenuItemID
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
InvalidateRgn
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
DispatchMessageW
MoveWindow
SetLayeredWindowAttributes
EqualRect
AnimateWindow
PeekMessageW
InflateRect
SetFocus
MapWindowPoints
GetParent
BeginPaint
EndPaint
DrawFrameControl
GetWindowTextW
MessageBoxExW
MapVirtualKeyW
GetKeyNameTextW
GetKeyState
SystemParametersInfoW
SetClassLongW
FindWindowW
GetDesktopWindow
GetFocus
GetDC
GetWindowDC
ReleaseDC
GetDlgItemTextA
SetDlgItemTextA
TabbedTextOutW
GetSubMenu
GrayStringW
ScreenToClient
DrawTextExW
DrawTextW
IsCharLowerW
SetMenu
CallNextHookEx
UnhookWindowsHookEx
UpdateLayeredWindow
SetWindowsHookExW
gdi32
TextOutW
RectVisible
GetWindowExtEx
CreateCompatibleBitmap
BitBlt
GetBkColor
CreatePen
SetStretchBltMode
CreateFontIndirectW
RoundRect
Rectangle
SetBkMode
GetDeviceCaps
SetBkColor
SetTextColor
CreateBitmap
SetPixelV
CreateHatchBrush
LPtoDP
Escape
GetMapMode
PtVisible
ExtTextOutW
CreateRectRgn
DPtoLP
ExcludeClipRect
GetClipBox
GetStockObject
CreateFontW
SelectObject
CreateDIBSection
GetDIBColorTable
SetDIBColorTable
GetTextFaceW
GetObjectType
IntersectClipRect
LineTo
GetTextExtentPoint32W
GetViewportOrgEx
GetWindowOrgEx
StretchBlt
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
SetPixel
RealizePalette
OffsetRgn
GetRgnBox
GetTextMetricsW
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetRectRgn
CombineRgn
PatBlt
CreateRectRgnIndirect
CreateDCW
CopyMetaFileW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
GetViewportExtEx
CreateRoundRectRgn
GetPixel
CreateCompatibleDC
CreateSolidBrush
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
CreatePatternBrush
DeleteDC
GetObjectW
DeleteObject
SetPaletteEntries
msimg32
AlphaBlend
TransparentBlt
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
shell32
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
ShellExecuteA
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragFinish
ExtractIconW
SHAppBarMessage
comctl32
ImageList_AddMasked
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Draw
shlwapi
PathFindFileNameW
StrCmpW
StrChrW
StrCpyW
PathRemoveFileSpecW
PathFileExistsA
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathFindExtensionW
uxtheme
DrawThemeText
DrawThemeParentBackground
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
IsAppThemed
GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
ole32
CoRevokeClassObject
CoRegisterMessageFilter
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleLockRunning
OleUninitialize
DoDragDrop
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
StringFromCLSID
CoCreateGuid
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
CoInitialize
OleIsCurrentClipboard
oleaut32
LoadTypeLi
VarBstrFromDate
VariantCopy
OleCreateFontIndirect
SafeArrayDestroy
VariantChangeType
VariantClear
VariantInit
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocString
SysAllocStringLen
oledlg
OleUIBusyW
gdiplus
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipLoadImageFromFile
GdipSetInterpolationMode
GdipDisposeImage
GdiplusStartup
GdiplusShutdown
GdipScaleWorldTransform
GdipCreateFromHDC
GdipGetImageHeight
GdipDrawImage
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipAlloc
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipGetImagePalette
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipFree
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 883KB - Virtual size: 882KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 125KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 756KB - Virtual size: 755KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ