Static task
static1
Behavioral task
behavioral1
Sample
321c3adf15578cec811230c41d6f44ab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
321c3adf15578cec811230c41d6f44ab.exe
Resource
win10v2004-20231215-en
General
-
Target
321c3adf15578cec811230c41d6f44ab
-
Size
228KB
-
MD5
321c3adf15578cec811230c41d6f44ab
-
SHA1
bf819afbde1a0c22adafcc083b5797cf5c5ea6db
-
SHA256
9d7297cce0cb8df0907bb3a62e50ae5d14a88b8659fa9d5295747f8d25dcf688
-
SHA512
ff84983eb97d8dbdcc1571f7eadfa70079bd7aaee450b1c957812068e19b7d02be8835aa42ded95979b10c0067b168881b7ec0e48157b7bdb25046c704d62e2d
-
SSDEEP
3072:QKnYEG4fx1yt2cw4nr7GtR2ZlW4ySPTlbVVDaGTS6TLRa1zGohfS5MNZYAFWLD3:QKnYEGxt3wUGuZVysVsGzUVwM3Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 321c3adf15578cec811230c41d6f44ab
Files
-
321c3adf15578cec811230c41d6f44ab.exe windows:4 windows x86 arch:x86
dcb88dc5e6a40c57d858f14979eecd11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFlags
WritePrivateProfileStringA
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
SetStdHandle
GetFileType
HeapFree
GetACP
RaiseException
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
MulDiv
SetHandleCount
GetStdHandle
GetStartupInfoA
GetEnvironmentVariableA
VirtualFree
GetDriveTypeA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
LocalAlloc
GetFileTime
GetFileSize
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcatA
SetErrorMode
GlobalUnlock
GlobalFree
LockResource
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpiA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LocalFree
WideCharToMultiByte
FindNextFileA
lstrcpyA
FindFirstFileA
GetLastError
SetLastError
FindClose
GetCurrentProcess
GetCommandLineA
GetModuleHandleA
OpenProcess
TerminateProcess
GetVersionExA
CreateDirectoryA
GetCurrentDirectoryA
CreateProcessA
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
Sleep
GetPrivateProfileSectionNamesA
FindResourceA
SizeofResource
LoadResource
GetPrivateProfileSectionA
GetSystemDirectoryA
CopyFileA
GetShortPathNameA
WaitForSingleObject
DeleteFileA
MoveFileA
WinExec
HeapCreate
HeapAlloc
HeapDestroy
MultiByteToWideChar
GetFileAttributesA
SetFileAttributesA
lstrlenA
GetModuleFileNameA
GetEnvironmentStringsW
GetWindowsDirectoryA
user32
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetSysColorBrush
DestroyMenu
CheckMenuItem
EnableMenuItem
LoadIconA
UpdateWindow
MapWindowPoints
GetSysColor
PeekMessageA
GetFocus
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
DefWindowProcA
ClientToScreen
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
GetClientRect
GetDC
ReleaseDC
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
SetFocus
IsWindowEnabled
ShowWindow
SetWindowPos
SetWindowLongA
PtInRect
GetClassNameA
SetCursor
ValidateRect
GetCursorPos
GetDlgCtrlID
GetWindowTextA
SetWindowTextA
GetWindowLongA
SendDlgItemMessageA
GetDlgItem
PostMessageA
PostQuitMessage
UnhookWindowsHookEx
GetSystemMetrics
RemovePropA
CharUpperA
wsprintfA
EnableWindow
SendMessageA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
LoadStringA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
GetMessageTime
SetMenuItemBitmaps
GetMessagePos
gdi32
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
LookupAccountNameA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteValueA
DeleteService
OpenServiceA
RegDeleteKeyA
AllocateAndInitializeSid
InitializeAcl
RegCloseKey
AddAccessAllowedAce
SetNamedSecurityInfoA
OpenSCManagerA
CloseServiceHandle
shell32
ShellExecuteExA
SHChangeNotify
comctl32
ImageList_Destroy
ord17
ole32
CoCreateInstance
CoInitialize
CoUninitialize
wininet
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
FindCloseUrlCache
msvcrt
fputc
fgetc
fgetpos
fsetpos
setvbuf
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
fputwc
ungetwc
fgetwc
ungetc
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ