Static task
static1
Behavioral task
behavioral1
Sample
5f6755a8ddd0c1d1f6a8ca5c683f6729f3de73e33a78b58792999b49d9a34373.exe
Resource
win7-20231129-en
General
-
Target
5f6755a8ddd0c1d1f6a8ca5c683f6729f3de73e33a78b58792999b49d9a34373
-
Size
9.9MB
-
MD5
95c319496cc8120b545224dca81871d0
-
SHA1
0d5bb8a3aaa3c2eb78c5435d64dba63ed19abc1a
-
SHA256
5f6755a8ddd0c1d1f6a8ca5c683f6729f3de73e33a78b58792999b49d9a34373
-
SHA512
b980fde7305db289244367c2fd824d01a951797addfbdd9314dea37195e593506f7395d73028ff51b5aff4d9670e3f2ccc263c8b3adbafc46026ba76ad47a773
-
SSDEEP
196608:yakIzcEZaicnQScYSpCPDfaAOYKoMW4ch900aAOYKoMW4ch900aAOYKoMW4ch90:Rz9cQSc4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f6755a8ddd0c1d1f6a8ca5c683f6729f3de73e33a78b58792999b49d9a34373
Files
-
5f6755a8ddd0c1d1f6a8ca5c683f6729f3de73e33a78b58792999b49d9a34373.exe windows:5 windows x86 arch:x86
c47d17463342e5d405453850b1797729
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ActivateActCtx
LoadLibraryW
CompareStringA
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalUnlock
GetCurrentThreadId
FreeResource
FindResourceA
GlobalFree
GetCurrentProcessId
GetModuleHandleW
GetPrivateProfileIntA
GetPrivateProfileStringA
GlobalAlloc
lstrcmpA
InterlockedExchange
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
SetThreadPriority
ResumeThread
SetEvent
SuspendThread
CreateEventA
lstrlenW
LocalFree
GlobalSize
CopyFileA
GlobalFlags
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
InterlockedDecrement
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetAtomNameA
GetACP
GetThreadLocale
FileTimeToSystemTime
GetStringTypeExA
lstrcmpiA
MoveFileA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
GetWindowsDirectoryA
GetNumberFormatA
GetTempFileNameA
GetTempPathA
InitializeCriticalSectionAndSpinCount
GetProfileIntA
SearchPathA
SetErrorMode
GetFileAttributesExA
SetFileAttributesA
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
DeactivateActCtx
GetUserDefaultLCID
ReplaceFileA
GetDiskFreeSpaceA
FindResourceExW
LocalUnlock
LocalLock
ExitProcess
DecodePointer
RtlUnwind
EncodePointer
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapReAlloc
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetFileInformationByHandle
GetDriveTypeA
FindFirstFileExA
VirtualAlloc
VirtualQuery
HeapSize
HeapQueryInformation
SetStdHandle
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetConsoleCP
GetConsoleMode
FatalAppExitA
SetConsoleCtrlHandler
GetLocaleInfoW
HeapCreate
HeapDestroy
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
LCMapStringW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetStringTypeW
CompareStringW
GetTimeZoneInformation
WriteConsoleW
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
GetDriveTypeW
GetProcessHeap
CreateFileW
InterlockedCompareExchange
MulDiv
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
FormatMessageA
WaitForSingleObject
GetModuleHandleA
LoadLibraryA
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
SleepEx
GetTickCount
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
GetProcAddress
MultiByteToWideChar
lstrcmpW
VirtualProtect
GlobalLock
WriteFile
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrlenA
SystemTimeToFileTime
ReadFile
SetFilePointer
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalMemoryStatusEx
GetSystemInfo
CreateFileA
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
FindFirstFileA
FindClose
GetLastError
Sleep
GetModuleFileNameA
lstrcpyA
lstrcatA
WritePrivateProfileStringA
DeleteFileA
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
GlobalGetAtomNameA
RaiseException
user32
IsZoomed
IsRectEmpty
DeleteMenu
AppendMenuA
GetSystemMenu
SetParent
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
ShowOwnedPopups
RemoveMenu
InsertMenuA
GetMenuStringA
RealChildWindowFromPoint
GetMenuItemInfoA
SystemParametersInfoA
GetSysColorBrush
LoadCursorA
GetDialogBaseUnits
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadCursorW
LoadMenuW
SetWindowRgn
RedrawWindow
SetTimer
KillTimer
WindowFromPoint
MessageBeep
NotifyWinEvent
GetAsyncKeyState
CharUpperA
UnionRect
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
GetKeyNameTextA
MapVirtualKeyA
SetRect
GetDCEx
LockWindowUpdate
UnregisterClassA
InvertRect
DrawFocusRect
HideCaret
GetIconInfo
CopyImage
GetNextDlgGroupItem
DrawIconEx
DestroyAcceleratorTable
SetClassLongA
DrawEdge
DrawFrameControl
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetCursorPos
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
RegisterClipboardFormatA
FrameRect
CopyIcon
CharUpperBuffA
PostThreadMessageA
WaitMessage
IsCharLowerA
MapVirtualKeyExA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
InSendMessage
CreateMenu
IsClipboardFormatAvailable
SendNotifyMessageA
GetUpdateRect
GetDoubleClickTime
SubtractRect
DestroyCursor
MapDialogRect
EnumChildWindows
DrawIcon
WindowFromDC
GetWindowRgn
GetTabbedTextExtentW
GetTabbedTextExtentA
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ScrollWindowEx
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetCursor
GetSystemMetrics
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconW
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetParent
GetWindowRect
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
SendMessageA
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
GetWindow
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetClientRect
ScreenToClient
InvalidateRect
SetCapture
EnableWindow
ReleaseCapture
UpdateWindow
wsprintfA
LoadAcceleratorsA
IsIconic
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetMenuBarInfo
LoadImageA
GetDlgItemTextA
DestroyIcon
InsertMenuItemA
CreatePopupMenu
OffsetRect
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
GetCursorPos
DrawStateA
IntersectRect
InflateRect
SetDlgItemInt
GetWindowThreadProcessId
ShowWindow
gdi32
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetGraphicsMode
SetWorldTransform
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
SetBkMode
SetBkColor
RestoreDC
CreateDIBitmap
CreateDCA
CopyMetaFileA
StretchDIBits
CreateFontA
GetCharWidthA
GetTextExtentPoint32A
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
GetTextMetricsA
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetObjectA
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateFontIndirectA
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
GetDeviceCaps
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreateBitmap
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetPixelV
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
SetArcDirection
SaveDC
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
SetPaletteEntries
ExtFloodFill
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
GetCurrentObject
CreatePolygonRgn
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
OffsetRgn
GetRgnBox
SetDIBColorTable
GetDIBits
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
RoundRect
ScaleWindowExtEx
shell32
DragFinish
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHAppBarMessage
SHGetMalloc
SHBrowseForFolderA
ShellExecuteExA
ShellExecuteA
DragQueryFileA
msimg32
TransparentBlt
AlphaBlend
comctl32
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetIconSize
ImageList_Create
ImageList_DrawEx
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_GetImageCount
shlwapi
PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathRemoveExtensionA
PathFindExtensionA
PathStripPathA
PathRemoveFileSpecW
oledlg
ord8
gdiplus
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipDrawImageI
wldap32
ord211
ord143
ord60
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord33
ord301
ord27
ord41
ord46
ord22
ws2_32
ioctlsocket
listen
accept
ntohl
gethostname
htonl
WSACleanup
WSAStartup
select
recv
send
WSAIoctl
setsockopt
getsockname
ntohs
bind
recvfrom
sendto
getaddrinfo
freeaddrinfo
connect
socket
closesocket
getpeername
getsockopt
htons
__WSAFDIsSet
WSAGetLastError
WSASetLastError
crypt32
CertFreeCertificateContext
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
GetJobA
comdlg32
GetFileTitleA
advapi32
RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueA
RegSetValueA
RegEnumValueA
RegOpenKeyExW
ole32
CoLockObjectExternal
RevokeDragDrop
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
OleRegEnumVerbs
OleRegGetMiscStatus
OleRun
OleQueryCreateFromData
OleQueryLinkFromData
OleDuplicateData
GetRunningObjectTable
CoGetMalloc
CreateOleAdviseHolder
CreateDataAdviseHolder
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
OleGetClipboard
OleSetMenuDescriptor
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
StgIsStorageFile
StgOpenStorage
CreateFileMoniker
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfile
CoInitializeEx
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CreateStreamOnHGlobal
CoInitialize
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoCreateGuid
CoUninitialize
CLSIDFromString
StringFromGUID2
CoCreateInstance
OleIsRunning
CoDisconnectObject
PropVariantCopy
RegisterDragDrop
oleaut32
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SysAllocStringLen
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysAllocString
SafeArrayPutElement
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 514KB - Virtual size: 513KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ