Static task
static1
Behavioral task
behavioral1
Sample
302df887621190b107ecdc927854f572.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
302df887621190b107ecdc927854f572.exe
Resource
win10v2004-20231215-en
General
-
Target
302df887621190b107ecdc927854f572
-
Size
810KB
-
MD5
302df887621190b107ecdc927854f572
-
SHA1
f46be96457c1250968f489a7e31dd57dc0d95422
-
SHA256
13e4f17f6ac4c2ad6ce9b4dd6f382ce90acfbe567cbc1282099a5abfa25cbb69
-
SHA512
1ec9d18b19d700a2126de4690d8d29817ef30b18f8dc089046baddb1329dfef65c6ac542e612629c28838065092c1a1d9088ee0371fe47ce3a7d8ef324fee1d3
-
SSDEEP
12288:+kXmO1LFoKnv8fHkJecYeUMP7zQTnnnqFojvysni/:vX1Lt80VmMzSnnDvJi/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 302df887621190b107ecdc927854f572
Files
-
302df887621190b107ecdc927854f572.exe windows:4 windows x86 arch:x86
370220a1ff0430b2431a38fe25907d6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitProcess
RtlUnwind
HeapReAlloc
ExitThread
CreateThread
SetStdHandle
GetFileType
HeapSize
VirtualAlloc
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
GlobalFlags
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
WriteFile
GetThreadLocale
GetFileTime
GetFileSize
GetFileAttributesW
FindFirstFileW
FindClose
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
WritePrivateProfileStringW
CreateEventW
ReleaseMutex
CreateMutexW
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
lstrlenA
lstrcmpA
GlobalAlloc
GetModuleHandleA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
CopyFileW
CreateDirectoryW
OpenEventW
GetTickCount
GetUserDefaultUILanguage
InterlockedDecrement
InterlockedIncrement
MulDiv
LoadLibraryW
GetProcAddress
WideCharToMultiByte
SetLastError
VerSetConditionMask
VerifyVersionInfoW
MapViewOfFile
CreateFileMappingW
GetFileSizeEx
WaitForSingleObject
Sleep
GetVersionExW
GetUserDefaultLangID
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalHandle
ExpandEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MoveFileExW
ReadFile
GetModuleFileNameW
GetLastError
SetFilePointer
FlushFileBuffers
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
GetTempFileNameW
GetTempPathW
RaiseException
GetModuleHandleW
DeleteFileW
MultiByteToWideChar
lstrcmpW
LocalAlloc
lstrlenW
CloseHandle
CreateProcessW
SizeofResource
LocalFree
FormatMessageW
FindResourceW
LoadResource
HeapDestroy
LockResource
user32
RegisterClipboardFormatW
CharUpperW
GetMessageW
TranslateMessage
ValidateRect
DestroyMenu
EndPaint
BeginPaint
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetLastActivePopup
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowTextW
GetFocus
SetWindowPos
SetFocus
MoveWindow
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SendDlgItemMessageW
CheckDlgButton
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
ClientToScreen
ScreenToClient
ReleaseCapture
SetCapture
KillTimer
SetTimer
InvalidateRect
ReleaseDC
GetDC
SetRectEmpty
PtInRect
TrackMouseEvent
LoadCursorW
SetCursor
GetSysColorBrush
SetWindowTextW
EnumChildWindows
GetWindowLongW
GetClassNameW
GetDlgCtrlID
IsWindowVisible
FillRect
GetClientRect
OffsetRect
TranslateAcceleratorW
SetWindowLongW
UnregisterClassW
RegisterClassW
EnableMenuItem
AdjustWindowRectEx
CreateAcceleratorTableW
SetRect
MapDialogRect
MessageBeep
DestroyAcceleratorTable
GetCursorPos
IsWindow
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetSysColor
IsRectEmpty
CopyRect
PostQuitMessage
RedrawWindow
GetWindowRect
GetWindowThreadProcessId
PostThreadMessageW
MessageBoxW
GetSystemMenu
LoadIconW
SendMessageW
PostMessageW
GetForegroundWindow
AppendMenuW
CloseWindow
GetWindow
EnumThreadWindows
WaitForInputIdle
GetParent
ShowWindow
EnableWindow
GetWindowTextLengthW
UnregisterClassA
gdi32
DeleteDC
GetStockObject
DPtoLP
SetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
MoveToEx
GetTextExtentPoint32W
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
SelectClipRgn
GetTextExtentExPointW
CreateCompatibleBitmap
BitBlt
SetBrushOrgEx
CreateCompatibleDC
CreatePatternBrush
GetDeviceCaps
GetTextMetricsW
Rectangle
CreatePen
CreateSolidBrush
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateFontIndirectW
GetObjectW
CreateDIBSection
DeleteObject
LineTo
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
shell32
SHGetFolderPathW
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
UrlUnescapeW
UrlEscapeA
PathAppendW
PathFileExistsW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoCreateGuid
StringFromGUID2
CoInitialize
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoInitializeEx
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
VariantChangeType
VariantInit
VariantClear
SysAllocString
SysFreeString
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
riched20
ord4
gdiplus
GdipFree
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdiplusStartup
msi
ord8
ord137
ord141
ord113
ord160
ord118
ord88
ord32
ord92
ord159
ws2_32
WSAStartup
wininet
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
InternetQueryDataAvailable
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetOpenUrlW
Sections
.text Size: 292KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ