Static task
static1
Behavioral task
behavioral1
Sample
dc0ee47e5f662ece058671b0346bc740.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dc0ee47e5f662ece058671b0346bc740.exe
Resource
win10v2004-20231215-en
General
-
Target
dc0ee47e5f662ece058671b0346bc740
-
Size
200KB
-
MD5
dc0ee47e5f662ece058671b0346bc740
-
SHA1
b4425b57e8a7e50fc011ca2fa54948eac06fe14d
-
SHA256
7f91c31b5ae0dec6d323d567ef3904cf7622c740a84d9d554c0cc07036feb2cf
-
SHA512
c77fca2fb50fe4213ef8f512cabf2ccbba8b9a548f4a1e396fca6749f1714cd3da49e6de171cca9988527d3950622c7bbcb02321d40053247a907086a7a09652
-
SSDEEP
6144:RuKBPG4F5jo+HU/U5rQTknEZ6IkC/xHZm:RuEG4fjfHU6QTlZ6IkCNZm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc0ee47e5f662ece058671b0346bc740
Files
-
dc0ee47e5f662ece058671b0346bc740.exe windows:4 windows x86 arch:x86
8984288d79e70019270ad748b43dc9fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFileInfoA
DragQueryFileA
ShellAboutA
DragAcceptFiles
DragFinish
winmm
waveOutReset
waveInGetPosition
waveOutGetPosition
waveInStart
mmioCreateChunk
mmioGetInfo
mmioOpenA
mmioDescend
mmioSeek
mmioRead
waveInReset
mmioAscend
waveOutPause
waveOutRestart
waveOutOpen
waveOutClose
waveInClose
waveInPrepareHeader
waveOutPrepareHeader
waveInAddBuffer
waveOutWrite
waveInUnprepareHeader
waveOutUnprepareHeader
waveInOpen
mmioClose
waveInGetNumDevs
waveOutGetNumDevs
mmioWrite
user32
DrawIcon
SetFocus
DrawMenuBar
DeleteMenu
SetForegroundWindow
ModifyMenuA
IsWindow
GetMenu
DialogBoxParamA
IsIconic
MoveWindow
GetWindowRect
EndDialog
DrawFocusRect
RemovePropA
CopyRect
RegisterClipboardFormatA
wsprintfW
SetPropA
SetWindowLongA
MapWindowPoints
GetPropA
SetRect
DrawEdge
GetFocus
GetActiveWindow
SetDlgItemTextA
InvalidateRect
CreateWindowExA
EnableWindow
KillTimer
GetAsyncKeyState
PeekMessageA
SetTimer
ShowWindow
InflateRect
DefWindowProcA
GetDC
ReleaseDC
BeginPaint
EndPaint
GetWindowTextA
GetDlgCtrlID
RegisterWindowMessageA
GetDlgItem
LoadIconA
DefDlgProcA
RegisterClassA
LoadAcceleratorsA
SetClassLongA
SetWindowTextA
CharNextA
CharPrevA
MessageBeep
GetWindowLongA
wvsprintfA
MessageBoxA
wsprintfA
OpenClipboard
GetClipboardData
LoadCursorA
CloseClipboard
SetCursor
PostQuitMessage
DestroyWindow
GetClientRect
FillRect
GetSysColor
LoadStringA
ClientToScreen
ScreenToClient
GetWindow
GetKeyState
EnableMenuItem
IsClipboardFormatAvailable
IsWindowEnabled
UpdateWindow
SendMessageA
WinHelpA
IsWindowVisible
SetActiveWindow
PostMessageA
GetSystemMetrics
CreateDialogParamA
GetMessageA
TranslateAcceleratorA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
CreateMenu
DestroyMenu
SetWindowPos
RemoveMenu
GetParent
RedrawWindow
GetMenuStringA
InsertMenuA
GetSubMenu
gdi32
SelectPalette
CloseMetaFile
GetTextExtentPointA
SetBkColor
RealizePalette
DeleteObject
SetBrushOrgEx
CreateSolidBrush
ExtTextOutA
SelectObject
GetStockObject
SetTextColor
BitBlt
PatBlt
DeleteDC
CreateBitmap
CreateCompatibleDC
SetMapMode
CreateHatchBrush
DeleteMetaFile
SetWindowExtEx
StretchBlt
CreateCompatibleBitmap
GetDIBits
GetDeviceCaps
SetWindowOrgEx
CreateMetaFileA
GetObjectA
kernel32
VirtualFree
VirtualAlloc
GetCPInfo
GetLastError
GetFileType
GetACP
GetModuleFileNameA
GetStdHandle
GetOEMCP
ExitProcess
GetVersion
GetEnvironmentStrings
UnhandledExceptionFilter
GetModuleHandleA
GetTempFileNameA
lstrcpynA
RtlZeroMemory
MultiByteToWideChar
FreeResource
RtlUnwind
CreateThread
GlobalMemoryStatus
GetLocaleInfoA
GetCommandLineA
lstrlenA
lstrcatA
DeleteFileA
GetFullPathNameA
CreateFileA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalLock
GlobalSize
LoadLibraryA
FreeLibrary
lstrcmpiA
MulDiv
lstrcmpA
GlobalHandle
GlobalUnlock
GlobalFree
GetProcAddress
LockResource
LoadResource
FindResourceA
RtlMoveMemory
WideCharToMultiByte
GlobalReAlloc
GetStartupInfoA
WaitForSingleObject
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comctl32
PropertySheetA
ord17
ord8
ole32
WriteClassStg
OleNoteObjectVisible
StgCreateDocfile
OleSave
CreateFileMoniker
OleInitialize
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterClassObject
CoLockObjectExternal
OleUninitialize
CoCreateInstance
OleBuildVersion
CLSIDFromString
OleDraw
WriteClassStm
CreateStreamOnHGlobal
ReleaseStgMedium
CreateDataAdviseHolder
WriteFmtUserTypeStg
StgOpenStorage
CreateOleAdviseHolder
CoGetMalloc
GetRunningObjectTable
CreateBindCtx
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
msacm32
acmFormatSuggest
acmStreamClose
acmStreamOpen
acmFormatDetailsA
acmFormatTagDetailsA
acmFormatChooseA
acmMetrics
acmStreamSize
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ