Static task
static1
Behavioral task
behavioral1
Sample
03a891a68457cf9bdac8a8bacd73ebc4.exe
Resource
win7-20231129-en
General
-
Target
03a891a68457cf9bdac8a8bacd73ebc4
-
Size
544KB
-
MD5
03a891a68457cf9bdac8a8bacd73ebc4
-
SHA1
c72c6d1379478e392acefaae3c591e2c27e8f21e
-
SHA256
233f165798a5b86c1dd46f8861eae8d87dd1f365c4b75f93b5e4de407a24dbf8
-
SHA512
ab7d10e654b3b7e6777c9c057ee340de5898821ecbe4c810d3b3c17866ce05501882ddefa664a4f0ea0f8bcd6b5d0ad8da620c4624caf1703de4810d19b758f5
-
SSDEEP
12288:3DQGMX9CofCv8Jz5N76Pn1CnG22xbfaAd6YBu3:zPMInI5Na1CG22xLr6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03a891a68457cf9bdac8a8bacd73ebc4
Files
-
03a891a68457cf9bdac8a8bacd73ebc4.exe windows:5 windows x86 arch:x86
e2c13af68de82cf24fbab4b5cbe5157f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winhttp
WinHttpConnect
WinHttpSetOption
WinHttpWriteData
WinHttpQueryHeaders
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpCrackUrl
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
kernel32
SizeofResource
FindResourceW
lstrcmpiW
GetVersionExW
WaitForMultipleObjects
CloseHandle
MultiByteToWideChar
ReadFile
GetFileSize
CreateFileW
Sleep
CreateThread
CreateDirectoryW
DeleteFileW
GetTempFileNameW
GetTempPathW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TryEnterCriticalSection
SetFilePointer
GetModuleFileNameW
WriteFile
GetFileAttributesW
lstrlenW
GetPrivateProfileStringW
lstrcatW
lstrcpyW
SetEnvironmentVariableW
GetLastError
FreeLibrary
LoadLibraryExW
GetProcessId
ExpandEnvironmentStringsW
WideCharToMultiByte
lstrcpynW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
WaitForSingleObject
GetCurrentThread
SetEvent
CreateEventW
GetModuleHandleW
LocalFree
FormatMessageW
lstrlenA
GetCommandLineW
QueryPerformanceCounter
GetEnvironmentStringsW
LoadResource
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
ExitProcess
GetFileType
SetHandleCount
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
MoveFileW
HeapAlloc
HeapFree
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
InterlockedDecrement
InterlockedIncrement
LockResource
GlobalAlloc
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTickCount
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryW
GetProcAddress
lstrcmpiA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryA
GetLocaleInfoW
SetStdHandle
GetConsoleCP
GetConsoleMode
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
FreeEnvironmentStringsW
user32
GetCursorPos
DestroyMenu
AppendMenuW
GetDlgCtrlID
MessageBoxW
CheckDlgButton
KillTimer
GetCursor
IsDlgButtonChecked
SetDlgItemTextW
LoadBitmapW
CreateDialogIndirectParamW
MessageBeep
BeginPaint
EndPaint
CreatePopupMenu
LoadImageW
CreateDialogParamW
PostQuitMessage
GetAncestor
EndDialog
DestroyWindow
SetWindowPos
SetTimer
GetMessageW
IsDialogMessageW
PostMessageW
TranslateMessage
DispatchMessageW
LoadIconW
FillRect
GetSysColorBrush
FindWindowExW
SendDlgItemMessageW
EnableWindow
BringWindowToTop
GetSysColor
GetWindowTextLengthW
GetWindowRect
CreateWindowExW
MoveWindow
GetDlgItemTextW
GetWindowTextW
EnumChildWindows
EnumWindows
GetWindowThreadProcessId
SetForegroundWindow
IsWindow
DrawTextW
SetWindowTextW
UpdateWindow
InvalidateRect
GetDC
GetClientRect
DrawFrameControl
ReleaseDC
GetParent
GetWindowLongW
SetPropW
LoadCursorW
SetCursor
GetDlgItem
GetPropW
ShowWindow
SetFocus
CallWindowProcW
SetWindowLongW
RemovePropW
SendMessageW
MapWindowPoints
ScreenToClient
TrackPopupMenuEx
gdi32
CreateDIBSection
GetTextExtentPoint32W
SelectObject
DeleteObject
CreateCompatibleBitmap
CreatePatternBrush
BitBlt
CreateCompatibleDC
CreateFontIndirectW
GetObjectW
GetStockObject
SetTextColor
SetBkMode
CreateSolidBrush
CreateFontW
DeleteDC
SetBkColor
advapi32
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
CommandLineToArgvW
ord190
SHOpenFolderAndSelectItems
ord155
SHCreateDirectoryExW
Shell_NotifyIconW
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemFree
shlwapi
PathAppendW
StrToIntW
StrToIntExW
PathFindFileNameW
StrToIntExA
PathFindExtensionW
PathRemoveFileSpecW
PathRenameExtensionW
StrChrIW
PathAddBackslashW
PathFileExistsW
PathIsDirectoryW
StrStrIW
SHCreateStreamOnFileEx
PathStripPathW
windowscodecs
WICConvertBitmapSource
msimg32
AlphaBlend
comctl32
ord17
Sections
.text Size: 361KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ