Static task
static1
Behavioral task
behavioral1
Sample
0ea7890a9651b0e0f5d5f000a4d40ac6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ea7890a9651b0e0f5d5f000a4d40ac6.exe
Resource
win10v2004-20231215-en
General
-
Target
0ea7890a9651b0e0f5d5f000a4d40ac6
-
Size
516KB
-
MD5
0ea7890a9651b0e0f5d5f000a4d40ac6
-
SHA1
b246dac5112027759cff824d279f33134a8df959
-
SHA256
75efb9c7b1d74db8f7f2259ffd65646041381e9eda7f3c34faf947017aeb8b96
-
SHA512
4e8a1c1f03ce32bed8ee94dcfa705d2531a64f6a12483ba73c563c1d439f394d59128d71d7ff0c0835a76584c400c6a55ec1da29010fa6165707abba217685f6
-
SSDEEP
12288:1wvfja6lQB9TpP/rD+7TRsniqnUH3oRbR:1wvfG9xrDbBnUXo1R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ea7890a9651b0e0f5d5f000a4d40ac6
Files
-
0ea7890a9651b0e0f5d5f000a4d40ac6.exe windows:4 windows x86 arch:x86
357f30d81ffdb7b172a21f77d3a9354e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PrintDlgA
GetFileTitleW
GetOpenFileNameA
GetFileTitleA
PrintDlgW
PageSetupDlgW
GetSaveFileNameA
ChooseColorW
ChooseFontA
comctl32
ImageList_Merge
DestroyPropertySheetPage
ImageList_Write
PropertySheetA
ImageList_GetImageCount
ImageList_DragShowNolock
ImageList_Destroy
ImageList_DragLeave
InitCommonControlsEx
ImageList_GetIconSize
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetDragImage
ImageList_GetImageInfo
ImageList_SetDragCursorImage
ImageList_DrawEx
ImageList_SetBkColor
ImageList_Read
ImageList_Add
ImageList_Duplicate
_TrackMouseEvent
ImageList_DragMove
ImageList_AddMasked
ImageList_Remove
ord17
ImageList_ReplaceIcon
ImageList_Draw
ImageList_DragEnter
CreatePropertySheetPageA
ImageList_Create
ImageList_Replace
ImageList_EndDrag
CreateStatusWindowW
ImageList_LoadImageA
winspool.drv
WritePrinter
StartPagePrinter
EndPagePrinter
StartDocPrinterA
OpenPrinterW
EndDocPrinter
StartDocPrinterW
ClosePrinter
DocumentPropertiesA
AbortPrinter
EnumPrintersW
EnumJobsW
EnumPrintersA
ord204
OpenPrinterA
gdi32
PlayMetaFileRecord
GetCurrentObject
ExcludeClipRect
CreateDCA
CreatePatternBrush
GetTextExtentPointA
TextOutW
ArcTo
GetCharWidthA
SelectClipPath
SetViewportOrgEx
CreatePenIndirect
CreateFontIndirectW
OffsetViewportOrgEx
Rectangle
PolyDraw
GetNearestColor
GetCharABCWidthsW
SetWindowOrgEx
ExtSelectClipRgn
RectVisible
SetAbortProc
CreatePolygonRgn
StartDocW
GetAspectRatioFilterEx
ExtTextOutW
Arc
OffsetRgn
RealizePalette
GetBoundsRect
SetBoundsRect
GetStockObject
CreatePolyPolygonRgn
GetFontData
CreateHalftonePalette
AbortPath
EnumFontFamiliesExW
ExtCreatePen
GetRgnBox
StartDocA
ScaleWindowExtEx
CreateBrushIndirect
PaintRgn
FrameRgn
SetViewportExtEx
GetKerningPairsA
OffsetClipRgn
AnimatePalette
Polygon
DeleteDC
PolyBezier
SetPolyFillMode
Escape
GetBkColor
CreateCompatibleBitmap
SetPixel
CopyMetaFileA
FloodFill
CreateRectRgn
LPtoDP
PlayEnhMetaFile
SetPixelV
ExtCreateRegion
CreateBitmap
SetBitmapBits
PolyBezierTo
CreateDIBitmap
PlayMetaFile
GetGlyphOutlineW
SetTextJustification
DrawEscape
ExtTextOutA
SetWorldTransform
GetDCOrgEx
SetPaletteEntries
GetTextCharacterExtra
CreateDIBPatternBrushPt
GetWindowExtEx
PtInRegion
GetTextExtentPoint32W
DeleteMetaFile
BitBlt
GetClipRgn
GetCharABCWidthsFloatA
SetROP2
FillRgn
SetStretchBltMode
SetDIBitsToDevice
Pie
GetCharWidth32W
GetDeviceCaps
Polyline
SetColorAdjustment
CreateDiscardableBitmap
RestoreDC
EndDoc
SelectPalette
GetTextAlign
CreateEllipticRgnIndirect
GetCharABCWidthsFloatW
GetTextExtentExPointA
EnumMetaFile
GetPaletteEntries
StretchDIBits
CreateSolidBrush
GetCharWidthW
MoveToEx
GetCharWidthFloatA
GetBkMode
GetViewportOrgEx
LineTo
CreateFontIndirectA
RoundRect
AngleArc
CreateDIBSection
PathToRegion
CreatePalette
SaveDC
GdiFlush
SetRectRgn
CreateCompatibleDC
GetPixel
CreateRectRgnIndirect
GetViewportExtEx
CreateBitmapIndirect
GetBrushOrgEx
SetTextCharacterExtra
SetMiterLimit
ResetDCA
PatBlt
GdiComment
CreateRoundRectRgn
CreateFontA
GetEnhMetaFileA
SetTextAlign
StartPage
AbortDoc
GetTextFaceA
GetColorAdjustment
GetRegionData
OffsetWindowOrgEx
GetObjectType
CombineRgn
StretchBlt
GetCharWidth32A
DeleteObject
UnrealizeObject
Chord
GetDIBits
EnumObjects
GetNearestPaletteIndex
SetGraphicsMode
GetTextMetricsW
GetClipBox
TextOutA
GetMapMode
CreatePen
SetBkColor
ScaleViewportExtEx
GetTextExtentPoint32A
GetArcDirection
WidenPath
EndPage
IntersectClipRect
PolyPolygon
DPtoLP
GetTextCharsetInfo
ModifyWorldTransform
CopyEnhMetaFileA
GetPolyFillMode
CreateEllipticRgn
EnumFontFamiliesExA
GetStretchBltMode
GetObjectW
SetMapperFlags
MaskBlt
ResizePalette
SetWindowExtEx
GetSystemPaletteEntries
SelectObject
Ellipse
PtVisible
GetWindowOrgEx
GetCharABCWidthsA
SelectClipRgn
GetTextColor
GetCurrentPositionEx
GetObjectA
ExtFloodFill
SetMapMode
PlgBlt
SetBrushOrgEx
SetTextColor
GetMiterLimit
SetBkMode
GetTextMetricsA
ExtEscape
kernel32
SetErrorMode
lstrcmpW
SetFileTime
VirtualAlloc
lstrcmpA
GetTempFileNameA
WaitForSingleObject
GetUserDefaultLCID
GetVersion
HeapDestroy
lstrcatW
GlobalDeleteAtom
GetCurrentProcess
GetVersionExA
ResumeThread
CreateProcessW
FreeResource
lstrcpyA
WriteConsoleW
InterlockedDecrement
LeaveCriticalSection
MoveFileA
CreateFileMappingW
SetEndOfFile
GetLocaleInfoW
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentVariableA
lstrcatA
VirtualFree
FindClose
GetFileAttributesW
FindNextFileW
ConvertDefaultLocale
GetExitCodeProcess
CompareStringA
GetCPInfo
MultiByteToWideChar
lstrcmpiA
GetDriveTypeA
EnumResourceLanguagesA
GetTimeZoneInformation
LoadLibraryA
UnmapViewOfFile
DeleteFileA
ExitThread
CompareStringW
IsDBCSLeadByte
GetModuleHandleA
WaitForMultipleObjects
GetTempFileNameW
LoadLibraryW
CreateEventA
GetLocaleInfoA
WideCharToMultiByte
GlobalGetAtomNameA
GetTempPathA
GetEnvironmentStringsW
OpenMutexA
DebugBreak
GetStringTypeA
GetCommandLineA
VirtualQuery
CreateEventW
CreateMutexW
GetCurrentThread
InitializeCriticalSection
SetLastError
HeapValidate
GetWindowsDirectoryA
IsBadStringPtrA
GetOEMCP
GetDateFormatA
DeleteCriticalSection
GetProfileStringA
IsDebuggerPresent
GetFileType
FormatMessageA
GetLastError
FreeEnvironmentStringsW
OutputDebugStringW
GlobalFree
SetUnhandledExceptionFilter
GetACP
WriteConsoleA
Sleep
CreateMutexA
SetFilePointer
CopyFileW
OpenProcess
SetThreadPriority
HeapFree
IsBadCodePtr
GetModuleFileNameA
GlobalAlloc
CloseHandle
EnumSystemLocalesA
GetProfileIntA
GetStringTypeW
TerminateProcess
GetConsoleOutputCP
CreateFileMappingA
GetFileSize
RemoveDirectoryW
FreeLibrary
IsValidCodePage
TlsAlloc
GlobalUnlock
CreateToolhelp32Snapshot
GetCurrentThreadId
RemoveDirectoryA
GlobalMemoryStatus
lstrlenA
LocalAlloc
CreateFileW
GetShortPathNameA
GetProcessHeap
InterlockedIncrement
HeapAlloc
GetDiskFreeSpaceW
FlushFileBuffers
GetSystemTimeAsFileTime
LCMapStringA
PulseEvent
GetTickCount
FatalAppExitA
GetLocalTime
HeapCreate
GlobalReAlloc
GetEnvironmentVariableW
GetEnvironmentStrings
FormatMessageW
IsValidLocale
SuspendThread
UnhandledExceptionFilter
ReleaseSemaphore
GlobalAddAtomA
SetHandleCount
MoveFileExA
CopyFileA
GetStartupInfoA
GetDiskFreeSpaceExA
GlobalLock
GetModuleHandleW
EnterCriticalSection
LCMapStringW
MapViewOfFile
WritePrivateProfileSectionA
TlsGetValue
GetThreadLocale
SetConsoleCtrlHandler
CreateThread
lstrcmpiW
LockResource
FindNextFileA
MoveFileW
SetFileAttributesA
ReadFile
GlobalHandle
WritePrivateProfileStringA
FindResourceA
GlobalFindAtomA
lstrcpynA
RtlUnwind
SetFileAttributesW
GetConsoleCP
IsBadReadPtr
WriteFile
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
GetSystemDefaultLangID
GetSystemDirectoryA
FindFirstFileA
GlobalFindAtomW
VirtualProtect
TlsSetValue
FileTimeToLocalFileTime
SizeofResource
OutputDebugStringA
IsBadWritePtr
GetProcAddress
HeapReAlloc
FreeEnvironmentStringsA
CreateProcessA
GetConsoleMode
CreateFileA
GetFullPathNameA
InterlockedExchange
GetTempPathW
LocalFree
IsBadStringPtrW
GetStartupInfoW
GetFileInformationByHandle
SetStdHandle
IsProcessorFeaturePresent
LoadResource
HeapSize
SetEnvironmentVariableA
GetStdHandle
TlsFree
RaiseException
ExitProcess
GetTimeFormatA
user32
MessageBeep
InflateRect
DefWindowProcA
IntersectRect
DestroyWindow
GetParent
CharUpperA
DrawEdge
FrameRect
DrawFocusRect
AppendMenuW
DestroyCaret
DdeInitializeA
CreateWindowExA
wvsprintfA
GetCursorPos
GetMenuCheckMarkDimensions
GetMenuItemID
SetMenuItemInfoW
SetWindowsHookExW
DrawTextExA
ReleaseCapture
SetWindowContextHelpId
EqualRect
GetDCEx
GetClassNameW
GrayStringW
ReleaseDC
LoadStringW
EndDialog
ShowScrollBar
SetFocus
RegisterClipboardFormatA
CreateWindowExW
EndPaint
IsMenu
IsIconic
DrawTextW
MapDialogRect
PeekMessageW
PostQuitMessage
GetNextDlgTabItem
BringWindowToTop
RegisterClassExA
GetClassNameA
DrawIcon
GetDlgCtrlID
LoadBitmapA
SetWindowTextW
GetScrollInfo
SendMessageW
LoadIconW
GrayStringA
ModifyMenuA
SetDlgItemTextA
FindWindowA
GetDlgItemInt
SystemParametersInfoW
GetTopWindow
RemovePropA
SendDlgItemMessageA
OpenClipboard
DefFrameProcA
SetWindowRgn
SetScrollRange
GetCapture
DeferWindowPos
IsWindowUnicode
GetClassInfoExA
RemoveMenu
GetWindowTextLengthW
wsprintfA
SetRect
GetPropA
FlashWindow
DeleteMenu
EndDeferWindowPos
SetActiveWindow
TranslateMessage
ShowOwnedPopups
GetDlgItem
SetRectEmpty
ClientToScreen
SetClipboardData
UnhookWindowsHookEx
DrawFrameControl
CreatePopupMenu
DrawTextA
AdjustWindowRect
DrawStateA
DestroyCursor
TranslateMDISysAccel
SetParent
SetCapture
UpdateWindow
GetSysColorBrush
ScreenToClient
DrawMenuBar
EnumChildWindows
GetDialogBaseUnits
FillRect
WinHelpA
GetWindowTextA
UnpackDDElParam
IsChild
DefWindowProcW
CheckMenuItem
SetPropA
TranslateAcceleratorA
GetClassLongW
DdeCreateDataHandle
GetWindowPlacement
CallWindowProcA
CharNextA
GetWindowLongA
SystemParametersInfoA
IsClipboardFormatAvailable
SetClipboardViewer
CopyAcceleratorTableA
BeginPaint
LoadIconA
GetWindowRgn
GetSystemMenu
SetMenuDefaultItem
SetWindowsHookExA
CopyRect
CreateAcceleratorTableW
GetMessageTime
CreateDialogIndirectParamA
GetMenu
IsWindowEnabled
IsDialogMessageA
PostMessageW
CallWindowProcW
CharLowerW
DrawIconEx
PostMessageA
GetAsyncKeyState
DestroyAcceleratorTable
MonitorFromPoint
GetSystemMetrics
GetKeyState
DispatchMessageW
GetDesktopWindow
SetScrollPos
GetDoubleClickTime
CreateDialogIndirectParamW
DestroyIcon
SetCursor
RegisterWindowMessageA
GetUpdateRect
RegisterClassA
OffsetRect
GetMessageW
AdjustWindowRectEx
DestroyMenu
IsWindowVisible
SetWindowLongA
GetWindowRect
CopyAcceleratorTableW
GetSysColor
CallNextHookEx
LoadCursorW
SubtractRect
CreateIconIndirect
IsRectEmpty
SetDlgItemInt
LoadMenuW
GetForegroundWindow
GetMessageA
SetWindowPos
SetWindowPlacement
SetCaretPos
GetClassLongA
UnregisterClassA
ExcludeUpdateRgn
GetClipboardData
EnableWindow
KillTimer
GetMenuItemInfoA
ChildWindowFromPointEx
GetWindowThreadProcessId
GetMenuState
MsgWaitForMultipleObjects
LoadAcceleratorsW
SetTimer
mouse_event
ShowCaret
CreateDialogParamA
RedrawWindow
GetWindowDC
LoadMenuA
WindowFromPoint
LoadImageW
UnregisterHotKey
SetWindowLongW
DdeCreateStringHandleA
PostThreadMessageA
SetWindowTextA
MessageBoxA
CopyIcon
GetDC
InsertMenuA
GetLastActivePopup
GetMenuStringW
IsWindow
PeekMessageA
HideCaret
MapWindowPoints
EmptyClipboard
RegisterWindowMessageW
PtInRect
GetWindowTextW
GetSubMenu
SendMessageA
SetForegroundWindow
CreateAcceleratorTableA
DispatchMessageA
ChildWindowFromPoint
GetClientRect
InvalidateRect
BeginDeferWindowPos
TrackPopupMenu
GetFocus
GetWindow
GetMenuDefaultItem
LoadCursorA
EnableScrollBar
ReuseDDElParam
GetActiveWindow
GetMenuItemCount
ShowWindow
CloseClipboard
EnableMenuItem
GetWindowTextLengthA
TabbedTextOutW
ScrollWindowEx
CharNextW
CharUpperW
LoadBitmapW
TabbedTextOutA
GetClassInfoA
IsDlgButtonChecked
InvalidateRgn
version
GetFileVersionInfoA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoW
VerLanguageNameA
GetFileVersionInfoSizeW
Sections
.text Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ