Static task
static1
Behavioral task
behavioral1
Sample
04b17e91f513014084743f8da38f0e21.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04b17e91f513014084743f8da38f0e21.exe
Resource
win10v2004-20231215-en
General
-
Target
04b17e91f513014084743f8da38f0e21
-
Size
655KB
-
MD5
04b17e91f513014084743f8da38f0e21
-
SHA1
2865ceaee5dc427134925bf2ab05fb9a3f1c63b7
-
SHA256
839e662805115f0caf7322753b49c9864b27d562fdbe329454aa54567bb2ed3e
-
SHA512
356529fac3290605e52b24dc6b1d40ec7d2a2fdcc0b625fef5f2a709c8aa6455cc5e97de0089a83a69679873a4ccabaa94f20069d4aac45fee0e770318052ec8
-
SSDEEP
12288:dslLOaBXHXgWN+LXfWP5VoaPKfcE2OjSTJVZMOvNb/1oLf:kmWN+rWcaPKhmiWNb1oLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b17e91f513014084743f8da38f0e21
Files
-
04b17e91f513014084743f8da38f0e21.exe windows:5 windows x64 arch:x64
4192dffc0fba62818d4c3581c5f29c4f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleW
SetErrorMode
RtlLookupFunctionEntry
RtlUnwindEx
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
RaiseException
RtlPcToFileHeader
HeapFree
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapReAlloc
HeapQueryInformation
HeapSize
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetStdHandle
HeapSetInformation
HeapCreate
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetFilePointer
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetModuleFileNameW
FormatMessageA
LocalFree
MulDiv
GetFileAttributesA
GlobalFree
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
lstrcmpA
GlobalAlloc
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GetModuleHandleA
GlobalGetAtomNameA
GlobalAddAtomA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
SetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
LoadLibraryA
GetProcAddress
Sleep
DeleteFileA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
ExitProcess
IsDebuggerPresent
GetCurrentProcessId
CreateFileA
WriteFile
InitializeCriticalSectionAndSpinCount
CloseHandle
user32
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetFocus
GetWindowTextA
GetForegroundWindow
DispatchMessageA
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
MessageBoxA
GetClassInfoExA
RegisterClassA
PtInRect
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetClassNameA
GetSysColor
ReleaseDC
DestroyMenu
WinHelpA
SetFocus
GetWindowThreadProcessId
IsWindowEnabled
GetDlgItem
GetDlgCtrlID
GetKeyState
LoadIconA
SetCursor
PeekMessageA
GetCapture
SetActiveWindow
IsWindowVisible
UpdateWindow
IsIconic
GetClassInfoA
CopyRect
GetLastActivePopup
PostMessageA
SetMenu
GetDesktopWindow
ShowWindow
GetWindow
AdjustWindowRectEx
SetWindowPos
GetClientRect
GetWindowLongA
IsWindow
EnableWindow
GetDC
ClientToScreen
GrayStringA
GetActiveWindow
CreateWindowExA
GetParent
GetMenuItemCount
GetSubMenu
GetMenuItemID
SendMessageA
GetMenu
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
DrawTextExA
DrawTextA
TabbedTextOutA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
gdi32
SetMapMode
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
shell32
SHChangeNotify
ShellExecuteA
shlwapi
PathFindExtensionA
PathFindFileNameA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 406KB - Virtual size: 429KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ