Static task
static1
Behavioral task
behavioral1
Sample
0138187727020506c8a6964223123e6e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0138187727020506c8a6964223123e6e.exe
Resource
win10v2004-20231215-en
General
-
Target
0138187727020506c8a6964223123e6e
-
Size
914KB
-
MD5
0138187727020506c8a6964223123e6e
-
SHA1
408c58bd6f822034681f06ec363ae4cc36983edb
-
SHA256
b0bbad245d74c4a5bc8f309917b5fbc4675bb8ba94b2ae49eb9b8ddeb48de006
-
SHA512
38c437325fb0a1c8e391f6adff55390a84b5b3739a3eb20a0362a4e3ddc11b238a37e5a3b535c784a3b4f8d5ee4b0bbbb34ea24f2665d869ac84264d217c2bbc
-
SSDEEP
24576:YxTJbYAV3rtRnqKMwMYFdcdWNt7d57GJOz08pGz:YxTJbYABrtjnTP9bd57GJOz08I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0138187727020506c8a6964223123e6e
Files
-
0138187727020506c8a6964223123e6e.exe windows:6 windows x86 arch:x86
19b991903810bcd91c7676591527215f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
HeapSize
FlushFileBuffers
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
MultiByteToWideChar
GetModuleHandleA
GetNativeSystemInfo
ExitProcess
Sleep
SetErrorMode
CreateFileA
GetLastError
CloseHandle
WriteFile
GetLogicalDrives
GetTickCount
GetFileAttributesA
HeapValidate
InitializeSListHead
user32
SetLayeredWindowAttributes
SetWindowPos
CharUpperA
SetFocus
GetFocus
SetTimer
ShowWindow
GetSystemMetrics
UpdateWindow
LoadIconA
LoadCursorA
MessageBeep
MessageBoxA
GetWindowTextLengthA
GetWindowTextA
KillTimer
LoadStringA
GetMessageA
DestroyWindow
CreateWindowExA
RegisterClassExA
PostQuitMessage
TranslateMessage
DispatchMessageA
DispatchMessageW
SendMessageA
DefWindowProcA
SetWindowTextA
gdi32
GetStockObject
CreateFontA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
shell32
ShellExecuteA
msvcp140
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
uxtheme
SetWindowTheme
comctl32
InitCommonControlsEx
ord17
ord345
vcruntime140
strrchr
_except_handler4_common
__std_type_info_destroy_list
memset
__current_exception_context
memcpy
memmove
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
__current_exception
api-ms-win-crt-runtime-l1-1-0
_crt_at_quick_exit
_initialize_narrow_environment
_set_app_type
_configure_narrow_argv
_get_narrow_winmain_command_line
_initterm
_initterm_e
_crt_atexit
_exit
_execute_onexit_table
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_seh_filter_dll
_endthreadex
terminate
_controlfp_s
_cexit
_beginthreadex
_invalid_parameter_noinfo_noreturn
exit
_initialize_onexit_table
_seh_filter_exe
api-ms-win-crt-string-l1-1-0
strncmp
strncpy
strncat
strcspn
api-ms-win-crt-filesystem-l1-1-0
_access_s
api-ms-win-crt-heap-l1-1-0
_msize
malloc
_callnewh
_set_new_mode
free
realloc
api-ms-win-crt-time-l1-1-0
_localtime64_s
api-ms-win-crt-math-l1-1-0
__setusermatherr
_except1
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 791KB - Virtual size: 791KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ