Static task
static1
Behavioral task
behavioral1
Sample
0c22693c8319cc100dea5783958d1f96.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c22693c8319cc100dea5783958d1f96.exe
Resource
win10v2004-20231215-en
General
-
Target
0c22693c8319cc100dea5783958d1f96
-
Size
212KB
-
MD5
0c22693c8319cc100dea5783958d1f96
-
SHA1
2223e577e146b164b4bea9b8d73d59d34b712f31
-
SHA256
15e67594f189911f6bb87951e30671852f68a1e915c7d35b7e01805feaf7d205
-
SHA512
143550874a4bd66d6b443cd090fcb3f9d2c35eba416bb0de7a614dc4b1c01f591b115e5e56545499dbb9410eacdafd857e97c3caf0cf213564c75cb6a1fa016d
-
SSDEEP
3072:d8ljVDbDaQ07me+VjMbI3ZGmgWxUjC02luTkz3YSee6ZcBOUwr73p8FPYR+DtMW:CjBbDaQ3e5bI3ZGKxUGtYSee6ZcvFcRW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c22693c8319cc100dea5783958d1f96
Files
-
0c22693c8319cc100dea5783958d1f96.exe windows:4 windows x86 arch:x86
b172f19b32ce9c90329850b80d59293c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
WideCharToMultiByte
GetThreadLocale
LoadLibraryW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
CreateFileW
GetProcAddress
LocalFree
FreeLibrary
LocalAlloc
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
GetVersion
GetFileAttributesW
GetCurrentThreadId
lstrcmpW
GlobalFlags
CompareStringW
GetModuleHandleA
GetVersionExA
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
InterlockedExchange
CompareStringA
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
RaiseException
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
lstrlenW
SetLastError
InitializeCriticalSection
CreateThread
DeleteCriticalSection
WinExec
GetExitCodeProcess
TerminateProcess
GetPrivateProfileStringW
Sleep
GetLastError
EnterCriticalSection
LeaveCriticalSection
FindFirstFileW
FindClose
GetModuleFileNameW
MultiByteToWideChar
WritePrivateProfileStringW
CreateProcessW
WaitForSingleObject
CloseHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindResourceW
LoadResource
LockResource
FileTimeToLocalFileTime
SizeofResource
user32
GetClassInfoW
GetClassInfoExW
CreateWindowExW
PostMessageW
GetMenu
GetClientRect
SetForegroundWindow
MapWindowPoints
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetForegroundWindow
RemovePropW
GetPropW
SetPropW
GetClassLongW
GetCapture
WinHelpW
LoadIconW
RegisterWindowMessageW
CheckMenuItem
EnableMenuItem
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DestroyMenu
PostQuitMessage
UnregisterClassA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetWindowPos
RegisterClassW
SetWindowLongW
IsWindow
GetDlgItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
SetWindowsHookExW
CallNextHookEx
DispatchMessageW
GetKeyState
ValidateRect
GetWindowTextW
LoadCursorW
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
CharUpperW
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
PostThreadMessageW
DefWindowProcW
CallWindowProcW
AdjustWindowRectEx
CopyRect
PeekMessageW
advapi32
RegOpenKeyExW
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
RegSetValueExW
RegCloseKey
SetServiceStatus
CreateServiceW
DeleteService
StartServiceW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
ControlService
shell32
SHGetSpecialFolderPathW
shlwapi
PathFindFileNameW
UrlUnescapeW
PathIsUNCW
PathStripToRootW
wininet
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetCloseHandle
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetQueryDataAvailable
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
DeleteObject
SaveDC
GetStockObject
CreateBitmap
DeleteDC
ScaleWindowExtEx
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
SetWindowExtEx
Escape
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetDeviceCaps
PtVisible
RectVisible
TextOutW
ExtTextOutW
SelectObject
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
comdlg32
GetFileTitleW
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ