Static task
static1
Behavioral task
behavioral1
Sample
60a46f76ef77b480d3189c7c7eb7b786a1fe624a7a189487844c09803f5e63a6.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
60a46f76ef77b480d3189c7c7eb7b786a1fe624a7a189487844c09803f5e63a6.exe
Resource
win10v2004-20231020-en
General
-
Target
60a46f76ef77b480d3189c7c7eb7b786a1fe624a7a189487844c09803f5e63a6
-
Size
5.5MB
-
MD5
f64787ca00491a760231960141228332
-
SHA1
fe72936263e30f43bef539b15ecdcec9e1b072b3
-
SHA256
60a46f76ef77b480d3189c7c7eb7b786a1fe624a7a189487844c09803f5e63a6
-
SHA512
5fd471a747957fca4dbbdd30d0e5fc0b3c304e7fba29fef7c1d95b9119dd7336b9cba17b2009b893cca7c024217f0b736dcd6df372101d89e2fdcccbe0cbdd59
-
SSDEEP
98304:d1UUpQynlBoM1cOrtE7TpFmNYfABtyNJ9JKRuBXb8iDNhJJx47L25uTZcgexVJWv:rmWa/zfABc90RQnXx4v256ofRh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60a46f76ef77b480d3189c7c7eb7b786a1fe624a7a189487844c09803f5e63a6
Files
-
60a46f76ef77b480d3189c7c7eb7b786a1fe624a7a189487844c09803f5e63a6.exe windows:5 windows x86 arch:x86
2a318abf5ab65e79febd3b335a3629d2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
ExpandEnvironmentStringsW
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryExW
GetSystemDirectoryW
GetDriveTypeA
GetCurrentDirectoryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapSize
GetFileType
SetStdHandle
CreateThread
ExitThread
HeapReAlloc
RaiseException
RtlUnwind
ExitProcess
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
GetStartupInfoW
FindResourceExW
VirtualProtect
GetProfileIntW
GetTickCount
SearchPathW
GetTempPathW
GetTempFileNameW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesW
lstrcpyW
GetCurrentDirectoryW
GlobalFlags
GlobalGetAtomNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
CreateFileW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
lstrlenA
lstrcmpA
GetCurrentProcessId
GetModuleHandleA
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleHandleW
WideCharToMultiByte
SetLastError
CopyFileW
GlobalSize
FormatMessageW
LocalFree
lstrlenW
MulDiv
DeleteFileW
SetCurrentDirectoryW
TerminateProcess
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrcpynW
GetModuleFileNameW
OpenProcess
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
CreateMutexW
GetCurrentProcess
MultiByteToWideChar
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
CreateEventW
TerminateThread
WaitForSingleObject
GetExitCodeThread
SetEvent
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
user32
SetRectEmpty
DeleteMenu
WaitMessage
WindowFromPoint
UnregisterClassW
LoadCursorW
GetSysColorBrush
CharUpperW
DestroyMenu
GetMenuItemInfoW
ShowOwnedPopups
SetCursor
SetWindowContextHelpId
MapDialogRect
SystemParametersInfoW
MessageBeep
RedrawWindow
IsZoomed
PostQuitMessage
InflateRect
EndPaint
BeginPaint
ClientToScreen
FillRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
ValidateRect
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
IsWindowVisible
UpdateWindow
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DefWindowProcW
CallWindowProcW
CopyRect
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
DestroyAcceleratorTable
UnhookWindowsHookEx
GetScrollPos
SetScrollPos
PostThreadMessageW
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetNextDlgTabItem
EndDialog
GetWindowTextLengthW
GetWindowTextW
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
IsWindow
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CheckDlgButton
GetWindow
GetMenuState
GetMenuStringW
AppendMenuW
LoadAcceleratorsW
CreateAcceleratorTableW
NotifyWinEvent
GetMenuItemID
InsertMenuW
SendMessageW
SetTimer
GetWindowRect
GetParent
KillTimer
GetMenuItemCount
RemoveMenu
LoadImageW
LoadBitmapW
GetSubMenu
LoadMenuW
SetForegroundWindow
GetCursorPos
LockWindowUpdate
DrawIcon
GetSystemMetrics
IsIconic
LoadIconW
wsprintfW
GetWindowThreadProcessId
GetWindowLongW
SetWindowLongW
BroadcastSystemMessageW
RegisterWindowMessageW
CreatePopupMenu
SetParent
SetClassLongW
GetSystemMenu
IsMenu
IsRectEmpty
BringWindowToTop
DestroyIcon
EnumChildWindows
RegisterClipboardFormatW
DrawStateW
OpenClipboard
PtInRect
GetDC
SetRect
GetFocus
ExitWindowsEx
ReleaseCapture
GetCapture
SetCapture
PostMessageW
GetWindowDC
ReleaseDC
GrayStringW
CopyAcceleratorTableW
ToUnicodeEx
MapVirtualKeyW
GetKeyboardLayout
GetKeyboardState
GetDesktopWindow
GetAsyncKeyState
EnableWindow
SetWindowRgn
InvalidateRect
EqualRect
GetClientRect
TabbedTextOutW
DrawTextW
DrawTextExW
DestroyCursor
GetWindowRgn
CreateMenu
CopyImage
GetIconInfo
SubtractRect
CopyIcon
CharUpperBuffW
GetUpdateRect
FrameRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
IsClipboardFormatAvailable
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetCursorPos
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
GetNextDlgGroupItem
InvalidateRgn
CharNextW
EmptyClipboard
CloseClipboard
SetClipboardData
GetWindowPlacement
GetDoubleClickTime
gdi32
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontIndirectW
CreateRectRgnIndirect
SetRectRgn
GetMapMode
PatBlt
DPtoLP
GetTextMetricsW
OffsetRgn
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
GetTextColor
GetDIBits
RealizePalette
StretchBlt
SetPixel
GetBkColor
CreatePolygonRgn
Polyline
Ellipse
Polygon
Rectangle
RoundRect
CreatePalette
GetPaletteEntries
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
SetPolyFillMode
SetROP2
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CopyMetaFileW
GetDeviceCaps
CreatePatternBrush
GetStockObject
PtInRegion
CreateEllipticRgn
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
CreateCompatibleBitmap
CombineRgn
CreateRectRgn
CreateDIBSection
GetObjectW
SetDIBColorTable
CreateCompatibleDC
SelectObject
GetTextExtentPoint32W
DeleteObject
DeleteDC
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegQueryValueW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegSetValueExW
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
OpenProcessToken
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
DragFinish
SHAppBarMessage
SHGetFileInfoW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
DragQueryFileW
comctl32
_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
oledlg
OleUIBusyW
ole32
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleLockRunning
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleGetClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
oleaut32
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
SysFreeString
SysStringLen
gdiplus
GdipDrawImageRectRectI
GdipDrawLinesI
GdipCreatePen1
GdipDrawPath
GdipSetSolidFillColor
GdipAddPathLineI
GdipAddPathArcI
GdipDeletePath
GdipCreatePath
GdipDrawString
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteFont
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipFillEllipse
GdipSetPixelOffsetMode
GdipSetInterpolationMode
GdipDrawCurve
GdipSetSmoothingMode
GdipDeletePen
GdipCreatePen2
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipDrawImageRectRect
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDrawImageRectI
GdipCreateFromHDC
GdipLoadImageFromFile
GdiplusStartup
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
psapi
GetModuleFileNameExW
winmm
PlaySoundW
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 306KB - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ