Static task
static1
Behavioral task
behavioral1
Sample
788ce251b91de2b98c7ebee35abcddd1.exe
Resource
win7-20231215-en
General
-
Target
788ce251b91de2b98c7ebee35abcddd1
-
Size
407KB
-
MD5
788ce251b91de2b98c7ebee35abcddd1
-
SHA1
20f97db5782d146ccc6faeac666ff515e271713d
-
SHA256
e454f5d186e2c71a8bb418bf78ad7b13067e1a3151377e84cdedecfc1f94feda
-
SHA512
e5addb986c96b09c2c7d917959b8f586971e5a1bfe406cf89e1abcdf03480599d0c87eb25527f888869b213b9044009be91197fcb580054549aab031281041d8
-
SSDEEP
6144:pUBVB1sx0ZE6TKo7ZrTVBwVzGQGNjqpEcA6evkvaF:9x0ueT7p0GtNZpkY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 788ce251b91de2b98c7ebee35abcddd1
Files
-
788ce251b91de2b98c7ebee35abcddd1.exe windows:5 windows x86 arch:x86
33b43d63db1a8c903f7b3041f9765de2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFlags
ReadFile
SetFilePointer
FlushFileBuffers
GetCPInfo
GetOEMCP
HeapFree
Sleep
RaiseException
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
HeapCreate
VirtualFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
SetStdHandle
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
GlobalAddAtomA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalGetAtomNameA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
InterlockedIncrement
GetModuleFileNameW
GetModuleHandleW
GlobalDeleteAtom
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
CompareStringA
InterlockedExchange
lstrcmpA
FreeLibrary
SetErrorMode
GetProcAddress
GetModuleFileNameA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
GetCommandLineA
GetModuleHandleA
GetWindowsDirectoryA
CreateFileA
WriteFile
CloseHandle
WinExec
lstrlenA
MultiByteToWideChar
GetLastError
InterlockedDecrement
WideCharToMultiByte
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
ExitProcess
GetPrivateProfileStringA
WritePrivateProfileStringA
FindResourceA
LoadResource
LockResource
SizeofResource
user32
SetWindowTextA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
GetForegroundWindow
DispatchMessageA
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
MessageBoxA
ShowWindow
SendMessageA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
DestroyMenu
GetWindowTextA
GetDlgItem
GetSubMenu
GetMenuItemCount
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
SetMenu
shell32
ShellExecuteA
SHChangeNotify
ole32
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoUninitialize
oleaut32
VariantChangeType
VariantClear
SysFreeString
SysStringLen
SysAllocString
VariantInit
GetErrorInfo
shlwapi
PathFindExtensionA
PathFindFileNameA
iphlpapi
GetAdaptersInfo
gdi32
CreateBitmap
GetStockObject
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
DeleteObject
DeleteDC
OffsetViewportOrgEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
GetDeviceCaps
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetViewportExtEx
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegSetValueExA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ