Static task
static1
Behavioral task
behavioral1
Sample
02a021dee4e7abaa2d0623fbab7c7aab.exe
Resource
win7-20231215-en
General
-
Target
02a021dee4e7abaa2d0623fbab7c7aab
-
Size
506KB
-
MD5
02a021dee4e7abaa2d0623fbab7c7aab
-
SHA1
8b17b09b074bed9e00e1314f4136e4839f26ad5f
-
SHA256
127b0760ed599ba0ada0f4813dcdc0f7fe090cd1a56f0e8e00cf61703638558c
-
SHA512
301779a5d84cbc6769d6876a644872a4c631c55f5e92df149bc95af1a3e4df13d8f71e0f604da6897e5dd47f11eeb2a48c2c6a73ecf2f4f02b4fcd369b510c4d
-
SSDEEP
12288:NMyFZKDPrOSR/lG3lTNw8kPirhTi7BuuSUvLt5g:FFIP4L9kPirFitJDng
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a021dee4e7abaa2d0623fbab7c7aab
Files
-
02a021dee4e7abaa2d0623fbab7c7aab.exe windows:5 windows x86 arch:x86
8b738c2fa7962a68ee4e390d569eb199
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winhttp
WinHttpConnect
WinHttpSetOption
WinHttpWriteData
WinHttpQueryHeaders
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpCrackUrl
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
kernel32
SizeofResource
FindResourceW
lstrcmpiW
GetVersionExW
WaitForMultipleObjects
CloseHandle
MultiByteToWideChar
ReadFile
GetFileSize
CreateFileW
Sleep
CreateThread
CreateDirectoryW
DeleteFileW
GetTempFileNameW
GetTempPathW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TryEnterCriticalSection
SetFilePointer
GetModuleFileNameW
WriteFile
GetFileAttributesW
lstrlenW
GetPrivateProfileStringW
lstrcatW
lstrcpyW
SetEnvironmentVariableW
GetLastError
FreeLibrary
LoadLibraryExW
GetProcessId
ExpandEnvironmentStringsW
WideCharToMultiByte
lstrcpynW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
WaitForSingleObject
GetCurrentThread
SetEvent
CreateEventW
GetModuleHandleW
lstrlenA
GetCommandLineW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadResource
FreeEnvironmentStringsA
HeapSize
ExitProcess
GetFileType
SetHandleCount
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
MoveFileW
HeapAlloc
HeapFree
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
InterlockedDecrement
InterlockedIncrement
LockResource
GlobalAlloc
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTickCount
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
GetProcAddress
lstrcmpiA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryA
GetLocaleInfoW
SetStdHandle
GetConsoleCP
GetConsoleMode
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
GetEnvironmentStrings
user32
GetAncestor
GetDlgCtrlID
MessageBoxW
DestroyMenu
GetCursorPos
SetDlgItemTextW
CreatePopupMenu
LoadImageW
CreateDialogParamW
PostQuitMessage
EndDialog
EndPaint
BeginPaint
MessageBeep
CreateDialogIndirectParamW
KillTimer
CheckDlgButton
IsDlgButtonChecked
SetTimer
PostMessageW
DestroyWindow
AppendMenuW
SetWindowPos
IsDialogMessageW
TranslateMessage
GetMessageW
DispatchMessageW
LoadIconW
FillRect
GetSysColorBrush
FindWindowExW
SendDlgItemMessageW
EnableWindow
BringWindowToTop
GetSysColor
GetWindowTextLengthW
GetWindowRect
CreateWindowExW
MoveWindow
GetDlgItemTextW
GetWindowTextW
EnumChildWindows
EnumWindows
GetWindowThreadProcessId
SetForegroundWindow
IsWindow
DrawTextW
SetWindowTextW
UpdateWindow
InvalidateRect
GetDC
GetClientRect
DrawFrameControl
ReleaseDC
GetParent
GetWindowLongW
SetPropW
LoadCursorW
SetCursor
GetDlgItem
GetPropW
ShowWindow
SetFocus
CallWindowProcW
SetWindowLongW
RemovePropW
SendMessageW
MapWindowPoints
ScreenToClient
TrackPopupMenuEx
gdi32
CreateDIBSection
GetTextExtentPoint32W
SelectObject
CreateFontIndirectW
CreateCompatibleBitmap
CreatePatternBrush
BitBlt
GetObjectW
GetStockObject
SetTextColor
SetBkMode
CreateSolidBrush
SetBkColor
DeleteDC
CreateFontW
DeleteObject
CreateCompatibleDC
advapi32
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
ord190
SHOpenFolderAndSelectItems
ord155
SHCreateDirectoryExW
Shell_NotifyIconW
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
CommandLineToArgvW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemFree
shlwapi
StrChrIW
PathRenameExtensionW
PathFileExistsW
PathRemoveFileSpecW
PathFindExtensionW
StrToIntExA
PathFindFileNameW
StrToIntExW
StrToIntW
PathAppendW
PathStripPathW
PathAddBackslashW
PathIsDirectoryW
StrStrIW
SHCreateStreamOnFileEx
windowscodecs
WICConvertBitmapSource
msimg32
AlphaBlend
comctl32
ord17
Sections
.text Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ