Static task
static1
Behavioral task
behavioral1
Sample
ca057647e5bff54e7dcd987973cf6becd3ae53148ae01dafad7ccad82c1ef82d.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ca057647e5bff54e7dcd987973cf6becd3ae53148ae01dafad7ccad82c1ef82d.exe
Resource
win10v2004-20231023-en
General
-
Target
ca057647e5bff54e7dcd987973cf6becd3ae53148ae01dafad7ccad82c1ef82d
-
Size
3.3MB
-
MD5
f9c964b438a80abe4be7bdd64c542901
-
SHA1
8b777b6f05c5fac6b31b9cf61cbed155bd12266a
-
SHA256
ca057647e5bff54e7dcd987973cf6becd3ae53148ae01dafad7ccad82c1ef82d
-
SHA512
922c47c22a025fe90f678d3dc857255e6359008b29cd762c99e8e937e3998c889103276351a05777d0fd5badf6a0ad28397926302ba3d28904a094213eb91779
-
SSDEEP
98304:R4f+mYJ2vLAt/8cZV/4T85AqZlxnt0k8/IlsPaJNd1VaiOY:Sf+mzv+/4QLxin/IlsPa5P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca057647e5bff54e7dcd987973cf6becd3ae53148ae01dafad7ccad82c1ef82d
Files
-
ca057647e5bff54e7dcd987973cf6becd3ae53148ae01dafad7ccad82c1ef82d.exe windows:6 windows x86 arch:x86
2e8ad3c795adbc371c7d8d34be402c7c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
IsValidCodePage
GetProcessHeap
GetStdHandle
GetTimeZoneInformation
UnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
TerminateProcess
GetStartupInfoW
InitOnceExecuteOnce
QueryPerformanceCounter
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetDriveTypeW
FatalAppExitA
SetStdHandle
GetStringTypeW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
GetTimeFormatEx
GetDateFormatEx
CompareStringEx
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
HeapQueryInformation
HeapSize
GetModuleHandleExW
AreFileApisANSI
ExitProcess
HeapReAlloc
VirtualQuery
SetThreadStackGuarantee
GetCommandLineA
GetSystemTimeAsFileTime
RaiseException
ExitThread
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
HeapAlloc
HeapFree
RtlUnwind
LocalUnlock
LocalLock
GetUserDefaultUILanguage
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
GetCurrentDirectoryA
SetErrorMode
SetFileAttributesA
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
GetACP
GetCPInfo
GetOEMCP
GlobalFlags
GetAtomNameA
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileA
GetTempFileNameA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
GetLocaleInfoEx
GetThreadPreferredUILanguages
ApplicationRecoveryFinished
ApplicationRecoveryInProgress
RegisterApplicationRestart
RegisterApplicationRecoveryCallback
GetCurrentThread
SuspendThread
SetThreadPriority
lstrcmpA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
GetCurrentProcessId
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
LoadLibraryW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeResource
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
GetFileAttributesW
FormatMessageA
MulDiv
SetLastError
GetVersion
FreeLibrary
GetVersionExA
LocalSize
CopyFileA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
TerminateThread
lstrcatA
GlobalSize
GetSystemDirectoryA
GetSystemInfo
InterlockedExchange
CreateEventA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CancelIo
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
SetUnhandledExceptionFilter
MultiByteToWideChar
FileTimeToSystemTime
GetVolumeInformationA
MoveFileA
GetLogicalDriveStringsA
lstrlenA
lstrcpyA
lstrcpynA
LocalFree
LocalAlloc
RemoveDirectoryA
ReadFile
GetFileSize
GetFileAttributesA
GetDiskFreeSpaceExA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
DeleteFileA
GetLocalTime
GetLastError
WriteFile
SetFilePointer
CreateFileA
CreateDirectoryA
SetCurrentDirectoryA
GetTickCount
VirtualFree
VirtualAlloc
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
Sleep
LoadLibraryA
GetProcAddress
ResumeThread
CreateThread
WaitForSingleObject
SetEvent
SetConsoleCtrlHandler
CloseHandle
InitializeCriticalSectionEx
user32
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
EqualRect
MapWindowPoints
AdjustWindowRectEx
RemovePropA
GetPropA
SetPropA
GetScrollRange
SetScrollRange
ScrollWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
SetMenu
GetMenu
GetCapture
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
RegisterClassA
CallWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
UnhookWindowsHookEx
RemoveMenu
InsertMenuA
GetMenuStringA
SetWindowLongA
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
IsWindow
LoadBitmapA
DrawIconEx
CheckMenuRadioItem
SetClassLongA
IntersectRect
ShowScrollBar
DrawTextA
CheckMenuItem
GetClipboardData
FindWindowA
SetForegroundWindow
AppendMenuA
GetSystemMenu
MessageBeep
EndDialog
RedrawWindow
DrawEdge
SystemParametersInfoA
GetDesktopWindow
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
LoadCursorW
GetWindow
ScreenToClient
GetCursorPos
MessageBoxA
UpdateWindow
DeleteMenu
GetMenuItemCount
EnableMenuItem
LoadMenuW
GetFocus
CharNextA
GetDlgCtrlID
IsWindowVisible
SetWindowPos
wsprintfA
LoadIconW
wvsprintfA
CopyIcon
LoadCursorA
PtInRect
SetRectEmpty
GetCursor
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetKeyState
GetClassInfoA
DefWindowProcA
DrawFrameControl
GetIconInfo
CreateIconIndirect
LoadImageA
DestroyIcon
DestroyCursor
GetTabbedTextExtentW
GetTabbedTextExtentA
WindowFromDC
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
GetWindowRgn
GetParent
GetWindowLongA
OffsetRect
InflateRect
CopyRect
FrameRect
FillRect
DrawFocusRect
GetSysColor
WindowFromPoint
ClientToScreen
SetCursor
GetWindowRect
GetClientRect
InvalidateRect
ReleaseDC
CreateMenu
InSendMessage
SendNotifyMessageA
SubtractRect
GetUpdateRect
GetKeyNameTextA
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
EnumChildWindows
CharUpperBuffA
ModifyMenuA
GetDoubleClickTime
ChangeWindowMessageFilter
SetCursorPos
DestroyAcceleratorTable
MapVirtualKeyA
CreateAcceleratorTableA
GetDC
DrawStateA
TrackPopupMenuEx
DrawTextExA
GrayStringA
TabbedTextOutA
GetWindowDC
BeginPaint
EndPaint
GetWindowThreadProcessId
GetSystemMetrics
CharUpperA
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
WaitMessage
EnableWindow
PostThreadMessageA
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
LoadIconA
SetRect
PostMessageA
GetNextDlgTabItem
GetActiveWindow
LoadMenuA
DestroyMenu
GetSubMenu
IsMenu
LoadImageW
EnumDisplayMonitors
SetLayeredWindowAttributes
LockWindowUpdate
GetDCEx
RegisterClipboardFormatA
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
GetMenuDefaultItem
SetParent
UnionRect
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
LoadAcceleratorsW
GetDialogBaseUnits
CopyImage
RealChildWindowFromPoint
UnregisterClassA
GetSysColorBrush
IsRectEmpty
SetWindowRgn
DrawIcon
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
InsertMenuItemA
CreatePopupMenu
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
IsIconic
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
IsZoomed
GetMenuItemInfoA
GetMenuState
IsClipboardFormatAvailable
gdi32
CreateDCA
GetDeviceCaps
CreateDIBPatternBrushPt
CreateHatchBrush
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
TextOutA
CombineRgn
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32A
CopyMetaFileA
CreateFontA
GetCharWidthA
CreateEllipticRgn
Ellipse
LPtoDP
GetBkColor
GetTextColor
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetDIBColorTable
Polygon
Polyline
EnumFontFamiliesExA
OffsetRgn
CreateRoundRectRgn
GetCurrentObject
FrameRgn
SetPixelV
ExtFloodFill
SetPaletteEntries
GetBoundsRect
GetWindowOrgEx
GetViewportOrgEx
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
SetBkMode
ExtTextOutA
CreateDIBSection
StretchDIBits
CreateSolidBrush
CreatePolygonRgn
StretchBlt
Rectangle
PtInRegion
PlgBlt
FillRgn
CreateFontIndirectA
GetObjectA
SetTextColor
SetPixel
SetBkColor
RoundRect
GetTextMetricsA
CreatePen
SelectObject
GetStockObject
GetPixel
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
ScaleWindowExtEx
BitBlt
CreateBitmap
msimg32
AlphaBlend
TransparentBlt
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
GetJobA
advapi32
SetFileSecurityA
RegSetValueA
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
GetFileSecurityA
RegCloseKey
RegQueryValueA
RegEnumKeyA
RegSetValueExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetKnownFolderPath
SHAddToRecentDocs
DragFinish
DragQueryFileA
SHCreateItemFromParsingName
SHGetDesktopFolder
Shell_NotifyIconA
ExtractIconA
ord71
SHGetFileInfoA
ShellExecuteA
ShellExecuteExA
SHGetMalloc
InitNetworkAddressControl
SHBrowseForFolderA
SHAppBarMessage
comctl32
_TrackMouseEvent
ImageList_AddMasked
shlwapi
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
SHAutoComplete
StrFormatKBSizeA
uxtheme
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
EndBufferedPaint
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
BeginBufferedPaint
BufferedPaintUnInit
BufferedPaintInit
DrawThemeTextEx
DrawThemeParentBackground
IsAppThemed
dwmapi
DwmDefWindowProc
DwmIsCompositionEnabled
DwmSetWindowAttribute
DwmExtendFrameIntoClientArea
ole32
CreateStreamOnHGlobal
OleRun
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateFileMoniker
OleCreateMenuDescriptor
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
StringFromGUID2
CoInitializeEx
CoRegisterMessageFilter
DoDragDrop
OleSetMenuDescriptor
PropVariantCopy
CreateOleAdviseHolder
CreateDataAdviseHolder
GetRunningObjectTable
CoGetMalloc
OleIsRunning
OleQueryCreateFromData
OleQueryLinkFromData
OleRegEnumVerbs
OleRegGetMiscStatus
GetHGlobalFromILockBytes
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
WriteClassStm
CreateItemMoniker
CreateGenericComposite
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoCreateGuid
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
StgIsStorageFile
StgOpenStorage
CoUninitialize
CoInitialize
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
CoTreatAsClass
CreateBindCtx
ReadClassStg
WriteClassStg
OleLockRunning
WriteFmtUserTypeStg
StgCreateDocfile
oleaut32
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SystemTimeToVariantTime
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
SysAllocString
SysReAllocStringLen
SysStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysAllocStringLen
SysStringByteLen
SafeArrayAccessData
SysFreeString
oledlg
ord8
ws2_32
select
ioctlsocket
connect
gethostname
gethostbyname
WSAWaitForMultipleEvents
WSASocketA
WSASend
WSARecv
WSAIoctl
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSAGetLastError
WSACleanup
WSAStartup
socket
setsockopt
listen
htons
bind
accept
inet_ntoa
getpeername
closesocket
pdh
PdhAddCounterA
PdhOpenQueryA
PdhCollectQueryData
PdhCloseQuery
PdhGetFormattedCounterValue
avifil32
AVIFileExit
AVIFileRelease
AVIFileOpenA
AVIFileCreateStreamA
AVIStreamRelease
AVIStreamSetFormat
AVIFileInit
AVIStreamWrite
msvfw32
DrawDibDraw
ICDecompress
DrawDibOpen
ICSendMessage
DrawDibClose
winmm
waveInPrepareHeader
waveInClose
waveInUnprepareHeader
waveInGetNumDevs
waveOutReset
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveOutGetNumDevs
waveInAddBuffer
waveInStart
waveInStop
waveInReset
PlaySoundA
waveInOpen
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
propsys
PSGetPropertyDescriptionListFromString
gdiplus
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipGetImagePalette
GdipBitmapUnlockBits
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageI
GdipDeleteGraphics
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 533KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ