Static task
static1
Behavioral task
behavioral1
Sample
7e5db1a3c62ef2803f906282b3995c849be9185ef640496cb27cfbf5e34ecdfe.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
7e5db1a3c62ef2803f906282b3995c849be9185ef640496cb27cfbf5e34ecdfe.exe
Resource
win10v2004-20231020-en
General
-
Target
7e5db1a3c62ef2803f906282b3995c849be9185ef640496cb27cfbf5e34ecdfe
-
Size
9.9MB
-
MD5
f2261e015933143457d177bf5cf0ac76
-
SHA1
6ce93af7dea420e77b33134af323759c410bf2ad
-
SHA256
7e5db1a3c62ef2803f906282b3995c849be9185ef640496cb27cfbf5e34ecdfe
-
SHA512
8c877e933a809c7ed72388f98ab22e68e6050da7f6b19a287c033d9758559783542329a2089b975cf124e063effc07ccf3bdfa6bbd7456bab57af9f90c82482e
-
SSDEEP
98304:LBTNrdxeq0s136QbbHO9ZAfylKHknMYlqLaSTmUWy7CJJ:Lfdb56QAMLmUWy7C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e5db1a3c62ef2803f906282b3995c849be9185ef640496cb27cfbf5e34ecdfe
Files
-
7e5db1a3c62ef2803f906282b3995c849be9185ef640496cb27cfbf5e34ecdfe.exe windows:6 windows x86 arch:x86
ff571a128a0e91ebf20540049f4a774b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
WaitForSingleObject
ReadProcessMemory
CreateToolhelp32Snapshot
Module32First
Module32Next
GetTickCount
GetCurrentDirectoryW
OpenThread
VirtualQuery
FlushInstructionCache
GetCurrentProcessId
CreateEventA
GetThreadContext
VirtualProtectEx
SetEvent
CloseHandle
GetThreadPriority
GetModuleHandleA
ResumeThread
SuspendThread
GetCurrentThreadId
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
SetFileAttributesA
DeleteCriticalSection
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
VirtualProtect
lstrlenA
GetCurrentDirectoryA
DeleteFileA
GlobalFree
GetSystemInfo
GetPrivateProfileStringA
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
VirtualAlloc
GetCurrentProcess
VirtualFree
EnterCriticalSection
GetCurrentThread
Beep
Sleep
FreeLibrary
VerSetConditionMask
GetProcAddress
LoadLibraryA
FindFirstFileExW
HeapReAlloc
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileSizeEx
GetTimeZoneInformation
UnlockFileEx
LockFileEx
HeapCompact
CreateProcessW
GetTempPathW
HeapSize
FlushFileBuffers
SetStdHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
MultiByteToWideChar
GetDriveTypeW
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
LoadLibraryExW
RaiseException
InterlockedPushEntrySList
RtlUnwind
FlushViewOfFile
GetStdHandle
ExpandEnvironmentStringsW
SetConsoleCtrlHandler
GetACP
GetExitCodeProcess
GenerateConsoleCtrlEvent
GetProcessTimes
MoveFileW
GetSystemTime
GetFileType
CreateProcessA
SystemTimeToFileTime
SetEnvironmentVariableA
SetCurrentDirectoryA
GetVersion
DuplicateHandle
GetEnvironmentVariableA
CreatePipe
SetEnvironmentVariableW
GetFileAttributesExA
MoveFileA
SetErrorMode
LoadLibraryExA
TlsFree
TlsGetValue
HeapAlloc
TlsAlloc
SetLastError
HeapFree
TlsSetValue
GetFullPathNameA
IsDBCSLeadByte
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
GetFileAttributesA
AreFileApisANSI
FindNextFileW
FindFirstFileW
MoveFileExW
DeviceIoControl
SetFileTime
SetFilePointerEx
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
DeleteFileW
CreateDirectoryW
SetCurrentDirectoryW
FormatMessageW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
TerminateProcess
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
CompareStringEx
GetLocaleInfoEx
GetModuleHandleW
GetSystemTimeAsFileTime
QueryPerformanceFrequency
LCMapStringEx
LocalFree
DecodePointer
EncodePointer
GetStringTypeW
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
FormatMessageA
CreateFileW
IsProcessorFeaturePresent
GetProcessHeap
HeapValidate
QueryPerformanceCounter
CreateSemaphoreA
ReleaseSemaphore
GetLocaleInfoA
GetVolumeInformationA
CompareStringA
WideCharToMultiByte
lstrlenW
GlobalLock
GlobalUnlock
VerifyVersionInfoA
GetVersionExA
GetSystemDirectoryA
WriteFile
SetFilePointer
ReadFile
OutputDebugStringA
WinExec
SetUnhandledExceptionFilter
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileA
RemoveDirectoryA
CreateDirectoryA
GlobalAlloc
GetLastError
PeekNamedPipe
user32
DefWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
IsWindow
DestroyWindow
MoveWindow
SetFocus
UpdateWindow
GetWindowLongA
SetWindowLongA
RegisterClassA
GetMenu
AdjustWindowRectEx
LoadCursorA
GetMessageA
TranslateMessage
GetClientRect
MessageBoxA
ClientToScreen
OffsetRect
GetAsyncKeyState
ReleaseDC
InvalidateRect
SetRect
PeekMessageA
GetDC
GetCursorPos
FindWindowA
PostQuitMessage
SystemParametersInfoA
FlashWindowEx
LoadIconA
ScreenToClient
SetWindowPos
GetKeyState
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ReleaseCapture
SetCapture
ChangeDisplaySettingsA
GetCapture
ShowWindow
GetSystemMetrics
LoadStringA
DispatchMessageA
CharPrevA
GetMonitorInfoA
MonitorFromPoint
CharPrevExA
CharNextExA
CharNextW
GetClipboardData
CloseClipboard
OpenClipboard
GetKeyboardLayout
GetKeyboardLayoutNameA
gdi32
CreateDIBSection
DeleteObject
GetPixel
SetBkMode
DeleteDC
CreateCompatibleDC
TextOutW
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32W
GetCharABCWidthsFloatW
CreateFontIndirectA
GetStockObject
TextOutA
GetTextExtentPoint32A
GetDeviceCaps
EnumFontFamiliesExA
advapi32
RegQueryInfoKeyA
RegLoadKeyA
RegSetValueExA
RegQueryValueA
RegFlushKey
RegCreateKeyExA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
CryptGenRandom
RegEnumValueA
RegDeleteValueA
RegConnectRegistryA
RegSaveKeyA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
ole32
OleUninitialize
OleInitialize
CoGetClassObject
CoCreateInstance
CoUninitialize
OleSetContainedObject
CoInitializeEx
CoInitialize
winmm
timeEndPeriod
timeGetDevCaps
timeGetTime
timeBeginPeriod
d3d8
Direct3DCreate8
imm32
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA
ImmNotifyIME
devil
ilInit
ilSave
ilEnable
ilSetPixels
ilTexImage
ilGenImages
ilLoad
ilCopyPixels
ilGetInteger
ilBindImage
ilShutDown
ilOriginFunc
ilConvertImage
ilDeleteImages
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
imagehlp
EnumerateLoadedModules
StackWalk
GetTimestampForLoadedLibrary
granny2
_GrannyGetMeshVertexCount@4
_GrannyGetTotalTypeSize@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetWorldPose4x4@8
_GrannyFreeWorldPose@4
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannyInstantiateModel@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeLocalPose@4
_GrannyNewLocalPose@4
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyMeshIsRigid@4
_GrannySetModelClock@8
_GrannyGetSourceSkeleton@4
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyConvertSingleObject@20
_GrannyFindMatchingMember@16
_GrannyGetMaterialTextureByType@8
_GrannySetLogCallback@4
_GrannyReadEntireFileFromMemory@8
GrannyPNT332VertexType
_GrannyDeformVertices@24
_GrannyFreeMeshDeformer@4
_GrannyGetSourceModel@4
_GrannyFindTrackGroupForModel@12
_GrannyFreeControl@4
_GrannyFreeControlOnceUnused@4
_GrannyFreeCompletedModelControls@4
_GrannyGetMeshIndexCount@4
_GrannyCompleteControlAt@8
_GrannyControlIsComplete@4
_GrannyFreeControlIfComplete@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyNewMeshDeformer@16
_GrannyCopyMeshIndices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshVertices@12
_GrannyGetControlSpeed@4
_GrannySetControlSpeed@8
_GrannyGetControlLocalDuration@4
_GrannySetControlEaseInCurve@28
_GrannySetControlEaseOut@8
_GrannySetControlEaseOutCurve@28
_GrannyGetControlRawLocalClock@4
_GrannySetControlRawLocalClock@8
_GrannyPlayControlledAnimation@12
_GrannyBeginControlledAnimation@8
_GrannyEndControlledAnimation@4
_GrannySetTrackGroupTarget@12
_GrannySetTrackGroupLOD@16
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshVertexType@4
_GrannySetControlEaseIn@8
mss32
_AIL_auto_update_3D_position@8
_AIL_mem_free_lock@4
_AIL_file_read@8
_AIL_set_file_callbacks@16
_AIL_WAV_info@8
_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_enumerate_3D_providers@12
_AIL_open_3D_provider@4
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_pause_stream@8
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_last_error@0
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_end_3D_sample@4
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
speedtreert
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
dinput8
DirectInput8Create
ws2_32
socket
send
select
recv
ioctlsocket
WSAGetLastError
closesocket
connect
__WSAFDIsSet
WSAStartup
WSACleanup
inet_addr
htons
gethostbyname
shell32
ShellExecuteA
ShellExecuteW
SHGetSpecialFolderPathA
oleaut32
SysFreeString
VariantClear
VariantInit
SysAllocString
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 618KB - Virtual size: 975KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ