Static task
static1
Behavioral task
behavioral1
Sample
8c86586bafb25b5d5496d0f582ab56b320b268d7b72cef0a9172461c7fc5f7a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c86586bafb25b5d5496d0f582ab56b320b268d7b72cef0a9172461c7fc5f7a4.exe
Resource
win10v2004-20231215-en
General
-
Target
8c86586bafb25b5d5496d0f582ab56b320b268d7b72cef0a9172461c7fc5f7a4
-
Size
1.2MB
-
MD5
31c2fe33472a135e22b7da817a5ecae3
-
SHA1
057ee04fa3d84d22fd72bf5a469e23c7d9cd2cf0
-
SHA256
8c86586bafb25b5d5496d0f582ab56b320b268d7b72cef0a9172461c7fc5f7a4
-
SHA512
ac9a9b96eec2833e1684059a32dce8a493c648177eede8d5c25e157c3da453b85f1d0b9a3d421461fadf561b56b9c6f9eed5c3ee6b11ebcb845edc1cdf539843
-
SSDEEP
24576:1F2j2K4q9xYpw4SiRK/sPubXZqODLR8lK:vyDyhubZ18U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c86586bafb25b5d5496d0f582ab56b320b268d7b72cef0a9172461c7fc5f7a4
Files
-
8c86586bafb25b5d5496d0f582ab56b320b268d7b72cef0a9172461c7fc5f7a4.exe windows:6 windows x86 arch:x86
8de8e307024151160aa21457e0ad2780
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmAssociateContext
ImmGetDefaultIMEWnd
kernel32
LoadLibraryA
FreeLibrary
UnmapViewOfFile
VirtualFreeEx
MapViewOfFile
ReadProcessMemory
VirtualAllocEx
OpenProcess
Sleep
CreateEventA
WaitForSingleObject
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetLastError
CloseHandle
ExitProcess
RaiseException
OutputDebugStringW
LocalFree
LocalFlags
LocalUnlock
LocalLock
GetLogicalProcessorInformationEx
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
lstrcpyA
GetModuleHandleA
lstrcmpA
CreateFileMappingA
GetPrivateProfileStringA
VirtualQuery
FindResourceA
LockResource
LoadResource
FindNextFileA
FindFirstFileA
FindClose
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
WritePrivateProfileStringA
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalMemoryStatus
GetLocalTime
GetVersionExA
PulseEvent
GetSystemInfo
WaitForMultipleObjects
LoadLibraryExA
RemoveDirectoryA
DeleteFileA
ResumeThread
GetExitCodeThread
VirtualProtect
TerminateThread
IsDBCSLeadByte
lstrcatA
OutputDebugStringA
GetTickCount
FileTimeToSystemTime
WriteFile
SetFilePointer
SetFileAttributesA
SetEndOfFile
ReadFile
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
CreateFileA
CreateDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
GetLogicalDrives
GetDriveTypeA
GetCurrentDirectoryA
GetSystemDefaultLCID
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
user32
GetDlgItem
SetDlgItemInt
SendDlgItemMessageA
IsClipboardFormatAvailable
GetActiveWindow
EnableWindow
IsWindowEnabled
GetSystemMetrics
DrawMenuBar
GetSystemMenu
DestroyMenu
CheckMenuItem
EnableMenuItem
GetSubMenu
GetMenuItemCount
AppendMenuA
TrackPopupMenu
GetMenuItemInfoA
SetForegroundWindow
AllowSetForegroundWindow
SetWindowTextW
GetClientRect
AdjustWindowRectEx
ClientToScreen
SetWindowLongA
CreateDialogParamA
GetParent
FindWindowA
FindWindowExA
GetWindowRect
DeleteMenu
GetFocus
PostThreadMessageA
PeekMessageA
GetWindowDC
ShowCaret
HideCaret
GetCaretPos
SetCaretPos
DestroyCaret
EnumWindows
GetClassNameA
GetWindowThreadProcessId
EnumDisplayMonitors
WaitMessage
IsDialogMessageA
RegisterClipboardFormatA
GetClipboardData
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
InsertMenuItemA
CreatePopupMenu
CreateMenu
DialogBoxParamA
GetMonitorInfoA
MonitorFromRect
GetDlgItemTextA
SetDlgItemTextA
GetAncestor
WindowFromPoint
ShowCursor
ReleaseCapture
IsZoomed
IsIconic
IsWindowVisible
GetWindowPlacement
SetWindowPos
MoveWindow
GetDoubleClickTime
ScreenToClient
GetCursorPos
GetWindowTextA
KillTimer
SetTimer
GetAsyncKeyState
SetRectEmpty
MessageBoxA
SetWindowTextA
InvalidateRect
UpdateWindow
LoadMenuA
SetFocus
ShowWindow
DestroyWindow
IsWindow
CreateWindowExA
PostQuitMessage
PostMessageA
DispatchMessageA
TranslateMessage
GetMessageA
OffsetRect
SendMessageA
SetCapture
GetCapture
EndDialog
GetDesktopWindow
RegisterClassExA
SetCaretBlinkTime
GetWindowLongA
WINNLSEnableIME
SystemParametersInfoA
EnumDisplaySettingsA
ChangeDisplaySettingsExA
LoadImageA
GetWindow
wvsprintfA
CharNextA
CharPrevA
DefWindowProcA
CallWindowProcA
DrawTextA
GetSysColor
FillRect
GetDC
ReleaseDC
IntersectRect
UnionRect
LoadCursorA
LoadCursorFromFileA
DestroyCursor
RegisterClassA
GetCaretBlinkTime
BeginPaint
EndPaint
GetUpdateRect
SetCursor
LoadIconA
CreateCaret
gdi32
SelectPalette
GetSystemPaletteEntries
RealizePalette
CreateCompatibleDC
Polyline
SetROP2
MoveToEx
SetTextColor
SetBkMode
SelectObject
LineTo
CreateSolidBrush
CreateRectRgn
CreatePen
CreateFontIndirectA
CreateICA
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
GdiFlush
AddFontResourceExA
BitBlt
EnableEUDC
GetOutlineTextMetricsA
CreatePalette
GetDCOrgEx
GetClipBox
GetTextExtentExPointA
GetGlyphOutlineA
TextOutA
GetTextExtentPoint32A
SetDIBColorTable
CreateDIBSection
SetStretchBltMode
StretchDIBits
StretchBlt
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHAppBarMessage
DragQueryFileA
DragQueryPoint
DragFinish
SHGetMalloc
ShellExecuteExA
ShellExecuteA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
msvcp140
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
winmm
timeBeginPeriod
timeGetTime
waveOutUnprepareHeader
waveOutPrepareHeader
timeSetEvent
timeKillEvent
midiOutOpen
midiOutClose
waveOutClose
midiOutPrepareHeader
timeGetDevCaps
waveOutOpen
midiOutUnprepareHeader
midiOutShortMsg
waveOutGetErrorTextA
waveOutGetDevCapsA
waveOutGetNumDevs
midiOutLongMsg
waveOutReset
mciSendCommandA
midiOutGetDevCapsA
midiOutReset
timeEndPeriod
waveOutWrite
comctl32
InitCommonControlsEx
ImageList_Destroy
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
libogg
ogg_stream_init
ogg_sync_init
ogg_sync_pageout
ogg_sync_clear
ogg_sync_buffer
ogg_stream_pagein
ogg_page_serialno
ogg_page_eos
ogg_stream_clear
ogg_stream_packetout
ogg_sync_wrote
libvorbis
vorbis_block_clear
vorbis_synthesis_blockin
vorbis_dsp_clear
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_init
vorbis_info_init
vorbis_info_clear
vorbis_comment_init
vorbis_block_init
vorbis_synthesis
vorbis_synthesis_headerin
vcruntime140
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
__current_exception
__current_exception_context
_except_handler4_common
memmove
_purecall
longjmp
_setjmp3
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
terminate
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_c_exit
_controlfp_s
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
api-ms-win-crt-heap-l1-1-0
_aligned_free
_aligned_malloc
free
_set_new_mode
malloc
_callnewh
api-ms-win-crt-locale-l1-1-0
_getmbcp
_setmbcp
_configthreadlocale
api-ms-win-crt-math-l1-1-0
_libm_sse2_atan_precise
_libm_sse2_tan_precise
_libm_sse2_log10_precise
_libm_sse2_sqrt_precise
_libm_sse2_log_precise
__setusermatherr
_libm_sse2_cos_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
floor
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
__stdio_common_vfprintf
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
__acrt_iob_func
api-ms-win-crt-string-l1-1-0
isdigit
strncpy
strncpy_s
api-ms-win-crt-convert-l1-1-0
_ultoa
_ltoa
atoi
strtoul
api-ms-win-crt-multibyte-l1-1-0
_mbsspnp
_mbschr
_mbslwr
_ismbbtrail
_ismbblead
_mbccpy
_mbsupr
_mbsstr
_mbsnbcpy
_mbspbrk
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
dwmapi
DwmIsCompositionEnabled
DwmGetWindowAttribute
DwmSetWindowAttribute
msvfw32
MCIWndCreateA
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 798KB - Virtual size: 797KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ