Static task
static1
Behavioral task
behavioral1
Sample
2116cd0300406be2df655ba1e952d8ed.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2116cd0300406be2df655ba1e952d8ed.exe
Resource
win10v2004-20231222-en
General
-
Target
2116cd0300406be2df655ba1e952d8ed
-
Size
1.1MB
-
MD5
2116cd0300406be2df655ba1e952d8ed
-
SHA1
a3ae03ed0593b6b9bae717746650efc9ac144cc3
-
SHA256
27c0902d2d4e423d04e364e1a25c006f767b248bac5146d2b60435395aa974be
-
SHA512
2fe8f46c0c42676a112242ff5c37fe0881411e00d411e3fd13b67005d43e6e4847421b56a166d4e79b1918cc9fdaa4e9ed0eed9f71fe3f50575a8053618d6934
-
SSDEEP
24576:dvqOzWWLNYcqCTBlUWYO8tDHkG8Wp2Usc/fAHItU:FLNYclBlUWYO8tDEkFgIt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2116cd0300406be2df655ba1e952d8ed
Files
-
2116cd0300406be2df655ba1e952d8ed.exe windows:4 windows x86 arch:x86
1bcb8934653fd8ae75911f24c8b785af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
LCMapStringW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetEnvironmentStringsW
SetEnvironmentVariableA
GetThreadContext
FlushInstructionCache
SetThreadContext
CreateProcessA
VirtualProtectEx
WriteProcessMemory
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
QueryPerformanceCounter
HeapSize
HeapReAlloc
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
RtlUnwind
SetErrorMode
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedIncrement
InterlockedDecrement
GlobalGetAtomNameA
lstrcatA
lstrcmpW
lstrcpynA
GetProcAddress
FreeLibrary
GetCurrentThreadId
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
FormatMessageA
LocalFree
MulDiv
Beep
GetExitCodeThread
SuspendThread
ResumeThread
CreateThread
WaitForSingleObject
lstrcmpA
RaiseException
GetTickCount
lstrcpyA
FindNextFileA
LoadLibraryA
DeleteFileA
GetModuleHandleA
WriteFile
FreeResource
WritePrivateProfileStringA
DeviceIoControl
CreateFileA
GetFullPathNameA
GetSystemDirectoryA
GetCurrentProcessId
GetPrivateProfileIntA
FindFirstFileA
CreateDirectoryA
FindClose
CopyFileA
GetPrivateProfileStringA
LoadResource
LockResource
SizeofResource
FindResourceA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
OpenProcess
CloseHandle
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
OpenFileMappingA
MapViewOfFile
CreateFileMappingA
GetProcessHeap
HeapAlloc
HeapFree
GetLastError
lstrlenA
lstrcmpiA
WideCharToMultiByte
CompareStringA
CompareStringW
MultiByteToWideChar
GetVersion
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
SetStdHandle
ExitProcess
user32
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DestroyWindow
GetMessageTime
GetScrollRange
GetScrollPos
SetForegroundWindow
AdjustWindowRectEx
DeferWindowPos
SetScrollInfo
GetClassInfoA
RegisterClassA
DefWindowProcA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuStringA
CopyAcceleratorTableA
GetTopWindow
EqualRect
wsprintfA
BeginDeferWindowPos
EndDeferWindowPos
IsChild
MapWindowPoints
GetDlgCtrlID
DispatchMessageA
GetMessageA
GetCapture
LockWindowUpdate
TrackPopupMenu
GetSysColorBrush
GetClassNameA
SetPropA
GetDCEx
GetPropA
RemovePropA
MessageBoxA
WindowFromDC
ModifyMenuA
GetMenuState
AppendMenuA
CreatePopupMenu
CreateMenu
DrawEdge
GetWindowDC
DrawMenuBar
IsMenu
RegisterWindowMessageA
GetMenuItemInfoA
GetDlgItem
GetKeyState
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
DrawIconEx
TrackPopupMenuEx
GetDesktopWindow
ClientToScreen
GetSystemMenu
RemoveMenu
InsertMenuA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
GetClassInfoExA
GetClassLongA
IntersectRect
LoadCursorA
SetCursor
SetScrollRange
SetScrollPos
ShowScrollBar
CharUpperA
SendMessageA
EnableWindow
PostMessageA
IsCharAlphaNumericA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
SetRectEmpty
GetIconInfo
GetMessagePos
GetSysColor
GetSubMenu
DrawFocusRect
DestroyIcon
DrawStateA
BringWindowToTop
InflateRect
SetRect
LoadImageA
UnregisterClassA
FillRect
SetParent
GetWindow
IsWindowVisible
CallWindowProcA
GetScrollInfo
GetWindowLongA
SetWindowLongA
GetParent
SetCapture
ReleaseDC
ScreenToClient
GetWindowRect
CopyRect
ReleaseCapture
PtInRect
IsRectEmpty
OffsetRect
UpdateWindow
IsWindowEnabled
EndDialog
GetNextDlgTabItem
EndPaint
CreateDialogIndirectParamA
GetActiveWindow
TabbedTextOutA
DrawTextA
GetFocus
InvalidateRect
SetWindowRgn
GetCursorPos
IsIconic
DrawIcon
GetSystemMetrics
GetClientRect
SetMenu
LoadMenuA
LoadBitmapA
LoadIconA
PeekMessageA
KillTimer
IsWindow
SetTimer
SetWindowPos
GetDC
CreateWindowExA
WinHelpA
SystemParametersInfoA
DrawTextExA
GrayStringA
PostThreadMessageA
RegisterClipboardFormatA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CharNextA
BeginPaint
TranslateMDISysAccel
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
WindowFromPoint
DestroyMenu
SetWindowContextHelpId
MapDialogRect
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
GetMenu
gdi32
LineTo
MoveToEx
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SetRectRgn
GetMapMode
DPtoLP
GetBkColor
StretchDIBits
GetTextColor
GetRgnBox
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateBitmap
CreatePen
GetCharWidthA
PatBlt
RoundRect
Rectangle
GetNearestColor
CreateCompatibleBitmap
GetGraphicsMode
SetGraphicsMode
GetPixel
Polygon
CreateFontA
GetTextExtentPoint32A
SetPixel
FillRgn
GetWindowOrgEx
CombineRgn
CreateRectRgnIndirect
CreateSolidBrush
BitBlt
CreateFontIndirectA
SetBkMode
GetStockObject
CreateRoundRectRgn
GetObjectA
SetDIBColorTable
DeleteDC
CreateDIBSection
CreateCompatibleDC
SelectObject
DeleteObject
StretchBlt
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegEnumKeyA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseServiceHandle
StartServiceA
OpenServiceA
CreateServiceA
OpenSCManagerA
DeleteService
ControlService
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
FreeSid
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
DragQueryFileA
SHGetPathFromIDListA
DragFinish
comctl32
ord17
_TrackMouseEvent
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
shlwapi
PathStripToRootA
PathFindFileNameA
PathFindExtensionA
StrRetToBufA
PathIsUNCA
oledlg
ord8
ole32
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
OleLockRunning
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
oleaut32
SysFreeString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
winmm
timeGetTime
ws2_32
inet_addr
connect
ioctlsocket
setsockopt
htons
recv
socket
send
WSAStartup
WSACleanup
htonl
ntohl
closesocket
gdiplus
GdipGetImageWidth
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdiplusShutdown
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipAlloc
GdipCloneImage
GdipFree
GdipDisposeImage
iphlpapi
GetAdaptersInfo
Sections
.text Size: 436KB - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 359KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 508KB - Virtual size: 506KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE