Static task
static1
Behavioral task
behavioral1
Sample
7e41a9af56cd397dd0c72981d3f5072ef12cec4ded187f18aeaff581b3101859.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
7e41a9af56cd397dd0c72981d3f5072ef12cec4ded187f18aeaff581b3101859.exe
Resource
win10v2004-20231020-en
General
-
Target
7e41a9af56cd397dd0c72981d3f5072ef12cec4ded187f18aeaff581b3101859
-
Size
83KB
-
MD5
29c7c7a28b3cb9c83b80076f5b162e5f
-
SHA1
127eef5b761688c60c082c317705496cb6c276b0
-
SHA256
7e41a9af56cd397dd0c72981d3f5072ef12cec4ded187f18aeaff581b3101859
-
SHA512
6d66a9a0df276fd7f5982e62012da9ed9ffe26ab844b618f42a4d02837368ebf169d3f61565439dbe6f0a7cee2c4c5453956c328020743fd96b3ad9234f84673
-
SSDEEP
1536:8SYbVSQYsQ7buktVdw1rSWPpnse4MTNvz2lnMkYmZi6N+DMaiZHR71rZOESIY:8SYQtbxCSWPpnz4MTNvz2lnMkYmZr+DP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e41a9af56cd397dd0c72981d3f5072ef12cec4ded187f18aeaff581b3101859
Files
-
7e41a9af56cd397dd0c72981d3f5072ef12cec4ded187f18aeaff581b3101859.exe windows:6 windows x86 arch:x86
60d8a76d181c3e8c6f962e05838e9f66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EncodePointer
OutputDebugStringW
IsProcessorFeaturePresent
LocalFileTimeToFileTime
GetCurrentDirectoryA
GetFileAttributesA
WriteFile
SetFileTime
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
GetSystemTimeAsFileTime
SystemTimeToFileTime
SetFilePointer
CreateFileA
CreateThread
DeleteFileA
CloseHandle
DeleteCriticalSection
CreateToolhelp32Snapshot
CreateMutexA
GetModuleFileNameA
CreatePipe
DecodePointer
WritePrivateProfileStringA
Process32Next
GetPrivateProfileStringA
FindClose
GetLastError
FindFirstFileA
GetStartupInfoA
CreateDirectoryA
InitializeCriticalSectionEx
ReadFile
TerminateProcess
CreateProcessA
Sleep
OpenProcess
Process32First
user32
GetWindowRect
ScreenToClient
SetWindowRgn
wsprintfA
PostQuitMessage
IsZoomed
ShowWindow
MonitorFromWindow
GetWindowLongA
SetWindowLongA
GetMonitorInfoA
GetClientRect
IsIconic
gdi32
CreateRectRgnIndirect
CombineRgn
CreateRoundRectRgn
DeleteObject
advapi32
CreateProcessAsUserA
DuplicateTokenEx
OpenProcessToken
ole32
CoUninitialize
CoInitialize
msvcp120
?_Winerror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
wininet
InternetCloseHandle
InternetOpenA
DeleteUrlCacheEntry
InternetReadFile
InternetGetLastResponseInfoA
InternetOpenUrlA
HttpQueryInfoA
urlmon
URLDownloadToFileA
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
duilib
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPBD@Z
?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPBD_N@Z
?MessageLoop@CPaintManagerUI@DuiLib@@SAHXZ
??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PBDKKHHHHPAUHMENU__@@@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?SendMessageA@CWindowWnd@DuiLib@@QAEJIIJ@Z
??0CWindowWnd@DuiLib@@QAE@XZ
??0STRINGorID@DuiLib@@QAE@PBD@Z
?MessageHandler@CPaintManagerUI@DuiLib@@QAE_NIIJAAJ@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@UtagPOINT@@@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PBD@Z
?AddNotifier@CPaintManagerUI@DuiLib@@QAE_NPAVINotifyUI@2@@Z
??HCDuiString@DuiLib@@QBE?AV01@PBD@Z
?GetRoundCorner@CPaintManagerUI@DuiLib@@QBE?AUtagSIZE@@XZ
?GetCaptionRect@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ
?GetSizeBox@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ
?Init@CPaintManagerUI@DuiLib@@QAEXPAUHWND__@@PBD@Z
??1CPaintManagerUI@DuiLib@@QAE@XZ
??0CPaintManagerUI@DuiLib@@QAE@XZ
?Offset@CDuiRect@DuiLib@@QAEXHH@Z
??0CDuiRect@DuiLib@@QAE@XZ
??0CDuiRect@DuiLib@@QAE@ABUtagRECT@@@Z
?MakeLower@CDuiString@DuiLib@@QAEXXZ
??8CDuiString@DuiLib@@QBE_NPBD@Z
??4CDuiString@DuiLib@@QAEABV01@PBD@Z
??0CDuiString@DuiLib@@QAE@XZ
??0CDuiString@DuiLib@@QAE@ABV01@@Z
??0CDuiString@DuiLib@@QAE@PBDH@Z
?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@VSTRINGorID@2@PBDPAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@@Z
??BCDuiString@DuiLib@@QBEPBDXZ
?HandleMessage@CWindowWnd@DuiLib@@MAEJIIJ@Z
?AttachDialog@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@@Z
??1CDuiString@DuiLib@@QAE@XZ
??0CDialogBuilder@DuiLib@@QAE@XZ
??1CDialogBuilder@DuiLib@@QAE@XZ
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPBDXZ
msvcr120
?terminate@@YAXXZ
_except_handler4_common
__crtSetUnhandledExceptionFilter
_commode
_fmode
_invoke_watson
_controlfp_s
_CxxThrowException
__CxxFrameHandler3
_setjmp3
memcpy
_acmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_ismbblead
_cexit
_exit
??3@YAXPAX@Z
_stricmp
sprintf
sprintf_s
memmove
_fsopen
free
malloc
memchr
strtol
_purecall
strrchr
longjmp
strcat_s
fclose
_time64
??2@YAPAXI@Z
calloc
_mbsstr
_except1
??_V@YAXPAX@Z
strcpy_s
memset
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
exit
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ