Static task
static1
Behavioral task
behavioral1
Sample
523ade51b36e79bec075ee82ea556252.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
523ade51b36e79bec075ee82ea556252.exe
Resource
win10v2004-20231215-en
General
-
Target
523ade51b36e79bec075ee82ea556252
-
Size
1.8MB
-
MD5
523ade51b36e79bec075ee82ea556252
-
SHA1
1957a5bc7a431d28532b82edf9109a538924aed2
-
SHA256
dde10ebc7e73616c443c780bce453ead16ff5e9ee1ad3f4207aa23793d2a6ca1
-
SHA512
757a05118a7f753f6ee7dce27b65b5e6e5fb2a48091542145d67017f35997778037a355776baee8ed0fdc7b6a9780c81e305da254d2dcf75150beae3df2fe75e
-
SSDEEP
49152:NdJglz46uwmhmiEyZzUck5elPdXKoVat9cefByD:NqyZzWaxVWuef
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 523ade51b36e79bec075ee82ea556252
Files
-
523ade51b36e79bec075ee82ea556252.exe windows:4 windows x86 arch:x86
f8ef1913651ae6ed332c537cc90bdd52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePen
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DeleteDC
DeleteObject
EndDoc
EndPage
ExtCreateRegion
ExtSelectClipRgn
ExtTextOutA
GetBkMode
GetClipRgn
GetCurrentObject
GetDIBits
GetDeviceCaps
GetObjectA
GetPixel
GetRegionData
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextMetricsA
IntersectClipRect
LineTo
CreatePalette
OffsetRgn
PatBlt
Polyline
RealizePalette
Rectangle
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBits
SetPixel
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
SetTextJustification
StartDocA
StartPage
StretchBlt
StretchDIBits
TextOutA
TextOutW
GetTextExtentPoint32W
CreateHatchBrush
CreateFontIndirectA
CreateDIBSection
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
MoveToEx
BitBlt
user32
UpdateWindow
UnregisterClassA
TranslateMessage
TranslateAcceleratorA
TrackPopupMenu
TrackMouseEvent
SystemParametersInfoA
ShowWindow
ShowCursor
SetWindowTextA
SetWindowRgn
SetWindowPos
SetWindowLongA
SetTimer
SetRect
SetMenu
SetFocus
SetDlgItemTextA
SetCursor
SetClassLongA
SetCapture
SendMessageA
SendDlgItemMessageA
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterClassExA
RedrawWindow
PtInRect
PostQuitMessage
PeekMessageA
OffsetRect
MoveWindow
ModifyMenuA
MessageBoxA
MenuItemFromPoint
MapWindowPoints
LockWindowUpdate
LoadMenuA
LoadImageA
LoadIconA
LoadCursorA
LoadAcceleratorsA
KillTimer
IsWindow
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InflateRect
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindowLongA
GetWindowDC
GetUpdateRect
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetMessageTime
GetMessagePos
GetMessageA
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetForegroundWindow
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetClassInfoExA
GetAsyncKeyState
FrameRect
FindWindowA
FillRect
EnumWindows
EnumChildWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextExA
DrawTextA
DrawFrameControl
DrawFocusRect
DispatchMessageA
DialogBoxParamA
wsprintfA
AppendMenuA
BeginPaint
CallWindowProcA
InsertMenuA
ValidateRect
CharLowerA
FindWindowExA
CheckMenuItem
CheckMenuRadioItem
ChildWindowFromPoint
ClientToScreen
CopyRect
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DeleteMenu
DestroyAcceleratorTable
DestroyCursor
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
SetDlgItemInt
kernel32
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FlushFileBuffers
SetFilePointer
FreeResource
GetEnvironmentVariableA
WinExec
SetStdHandle
SetUnhandledExceptionFilter
IsBadCodePtr
LeaveCriticalSection
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetCurrentProcess
TerminateProcess
GetStartupInfoA
lstrlenA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
WaitForSingleObject
VirtualFree
VirtualAlloc
SystemTimeToFileTime
SizeofResource
SetNamedPipeHandleState
RtlZeroMemory
ReadFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetTempPathA
GetTempFileNameA
GetSystemTime
GetSystemDirectoryA
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetLastError
GetFileSize
GetCurrentDirectoryA
GetCommandLineA
GetBinaryTypeA
FreeLibrary
FormatMessageA
FindResourceA
ExitProcess
DeleteFileA
CreateProcessA
CreateFileA
CopyFileA
CompareStringA
CompareFileTime
CloseHandle
comctl32
InitCommonControlsEx
ord17
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_Draw
ImageList_Destroy
comdlg32
GetSaveFileNameA
PrintDlgA
GetOpenFileNameA
shell32
ShellExecuteA
ole32
OleInitialize
OleUninitialize
wsock32
socket
send
recv
inet_ntoa
ioctlsocket
htons
gethostbyname
connect
closesocket
WSAStartup
WSAGetLastError
WSACleanup
WSAAsyncSelect
advapi32
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE