Static task
static1
Behavioral task
behavioral1
Sample
7f78981dc82b9b241efd24d274422781.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f78981dc82b9b241efd24d274422781.exe
Resource
win10v2004-20231215-en
General
-
Target
7f78981dc82b9b241efd24d274422781
-
Size
285KB
-
MD5
7f78981dc82b9b241efd24d274422781
-
SHA1
8fb597eab406c3643f117aad9b7d6a1832f2f40c
-
SHA256
f079cd57bd4ca6cc2733c2a67b7171da339cf581236c48d1f116b2fd83c1d6ce
-
SHA512
7aabf6246d2c95585b0b1f0a530f9f10d8be3e66d3b53db9d0b2b3fe09a982c7936de1faad5f728fe71afd420798fce4962b89c1bc27a4c7e7aa765b3152a1fd
-
SSDEEP
3072:kXfuaX9G9dA4N6QgIcp/kTrZnErTUsFN5jQK6EL4NFXzGV8Cm8WJD3+tnJOThiNp:kXfmEQ1C8tk4js38uRwsI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f78981dc82b9b241efd24d274422781
Files
-
7f78981dc82b9b241efd24d274422781.exe windows:5 windows x86 arch:x86
bcc4cbce568ec755757cfe1dcf11884f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
WriteProfileStringW
GetProcessIoCounters
SetDefaultCommConfigA
ResetEvent
SetThreadExecutionState
SetComputerNameW
BackupRead
AddAtomA
GetProcessWorkingSetSize
HeapSize
ConvertDefaultLocale
UnregisterWait
CreateActCtxA
GetCommProperties
VirtualLock
GetSystemTimes
TryEnterCriticalSection
GetVolumeInformationA
EncodeSystemPointer
FindFirstChangeNotificationA
EnumResourceNamesA
FreeLibraryAndExitThread
GetSystemDefaultUILanguage
AssignProcessToJobObject
UnlockFile
lstrcatA
FatalExit
SetComputerNameA
ReadFileScatter
DebugBreak
ReadConsoleOutputCharacterW
DebugActiveProcessStop
SetConsoleTextAttribute
SetCommState
GetConsoleMode
QueryPerformanceFrequency
GetSystemTime
EnumResourceLanguagesA
DeleteTimerQueueTimer
SetCriticalSectionSpinCount
SetUserGeoID
LocalFree
DeactivateActCtx
GetComputerNameA
SetProcessShutdownParameters
FreeLibrary
LCMapStringW
FreeEnvironmentStringsW
EnumSystemLocalesA
FreeUserPhysicalPages
SetDefaultCommConfigW
GlobalUnfix
PrepareTape
LocalFileTimeToFileTime
CreateDirectoryA
GetTickCount
GetProcessShutdownParameters
GetSystemDirectoryW
ReadConsoleOutputW
GlobalCompact
GetMailslotInfo
GetVersionExA
GlobalHandle
EnumResourceTypesA
SetHandleInformation
GetWriteWatch
GetLastError
GetTempPathA
CreateMutexW
lstrcpyW
SetProcessWorkingSetSize
GlobalDeleteAtom
LocalSize
SetConsoleCtrlHandler
GetThreadPriority
SetThreadIdealProcessor
EndUpdateResourceA
GetTimeFormatA
SetCurrentDirectoryA
CreateDirectoryExA
_lcreat
FindNextFileW
AddConsoleAliasA
InterlockedPopEntrySList
FindNextVolumeMountPointA
AllocateUserPhysicalPages
InterlockedExchangeAdd
CheckNameLegalDOS8Dot3W
WritePrivateProfileSectionA
LCMapStringA
WriteConsoleOutputA
CommConfigDialogA
GetDllDirectoryW
GetCurrentActCtx
FindNextVolumeW
FindResourceExW
_hread
CreateWaitableTimerW
Sleep
SetProcessPriorityBoost
IsBadReadPtr
GetThreadSelectorEntry
lstrcatW
CreateMutexA
LocalAlloc
GetSystemTimeAdjustment
CreateProcessA
GetTimeFormatW
QueryMemoryResourceNotification
GetConsoleProcessList
IsWow64Process
GetConsoleScreenBufferInfo
FlushInstructionCache
GetTempFileNameW
SetErrorMode
BuildCommDCBW
CompareFileTime
WritePrivateProfileStructW
GetConsoleTitleA
WriteProcessMemory
SetEnvironmentVariableW
GetThreadContext
DeleteVolumeMountPointW
GetUserDefaultUILanguage
DnsHostnameToComputerNameA
SetLocalTime
GetConsoleAliasesW
GetProcessId
ReleaseMutex
ClearCommBreak
GetProcessHandleCount
FileTimeToLocalFileTime
SetFilePointer
EnumCalendarInfoW
IsDebuggerPresent
GetPriorityClass
GetUserDefaultLCID
GetLogicalDriveStringsA
MoveFileWithProgressA
InitializeCriticalSection
GetConsoleAliasesLengthW
_lopen
GetProfileStringA
GlobalUnWire
GetCommTimeouts
GetLongPathNameW
SetVolumeLabelA
VirtualAllocEx
WaitForSingleObject
GetModuleFileNameA
ReleaseActCtx
UnregisterWaitEx
GlobalAlloc
WriteConsoleOutputCharacterA
ActivateActCtx
CreateDirectoryW
SetThreadContext
GetComputerNameW
MoveFileWithProgressW
EnumCalendarInfoExW
WriteProfileStringA
GetPrivateProfileStructW
EnumSystemLanguageGroupsW
CreateFileMappingW
FindNextFileA
GetStartupInfoA
SetDllDirectoryW
FindFirstFileW
ExpandEnvironmentStringsA
FatalAppExitA
GetVolumeInformationW
GetSystemInfo
EnumDateFormatsW
GetExitCodeThread
GetExitCodeProcess
GetConsoleWindow
LocalUnlock
RtlCaptureContext
OpenEventA
LocalHandle
GetNumberOfConsoleInputEvents
GetPrivateProfileStringW
GlobalReAlloc
GetDateFormatW
DebugSetProcessKillOnExit
BeginUpdateResourceW
WriteProfileSectionA
VerSetConditionMask
HeapFree
SetConsoleScreenBufferSize
ReleaseSemaphore
CreateHardLinkW
GetBinaryTypeW
CreateIoCompletionPort
GetShortPathNameW
EnumDateFormatsExA
FindResourceExA
QueryDosDeviceA
DefineDosDeviceA
VirtualUnlock
ChangeTimerQueueTimer
CreateEventW
SetMailslotInfo
GetConsoleCP
WriteConsoleOutputCharacterW
IsBadCodePtr
GetOEMCP
SetDllDirectoryA
GetFileInformationByHandle
GetFileAttributesExW
ReplaceFileW
GetStringTypeExW
GetAtomNameA
IsBadStringPtrA
EnumLanguageGroupLocalesW
FindFirstFileExA
FindNextChangeNotification
DeleteFileW
CreateMailslotA
GetUserGeoID
GetProfileSectionW
SetConsoleOutputCP
MulDiv
SetFirmwareEnvironmentVariableA
GetSystemDirectoryA
GetThreadLocale
GetConsoleAliasExesLengthA
GetSystemPowerStatus
QueryPerformanceCounter
EnumSystemCodePagesW
DisconnectNamedPipe
CreateFileMappingA
WriteConsoleOutputW
lstrlenW
GetCommState
IsProcessorFeaturePresent
CreateFiberEx
SetFileShortNameA
PeekConsoleInputW
ExpandEnvironmentStringsW
GetEnvironmentVariableW
FindResourceW
CreateActCtxW
MapViewOfFile
LocalLock
ReadConsoleOutputAttribute
SetConsoleTitleW
SetTapePosition
GetPrivateProfileSectionW
GetVolumePathNamesForVolumeNameW
DeviceIoControl
CompareStringW
TlsSetValue
GlobalFlags
GetSystemWow64DirectoryA
SetSystemTimeAdjustment
GetTempPathW
RequestWakeupLatency
GetConsoleAliasExesLengthW
CreateEventA
GetStartupInfoW
GetDefaultCommConfigW
BackupSeek
CreateDirectoryExW
CancelDeviceWakeupRequest
QueryInformationJobObject
DeleteFiber
InterlockedDecrement
GenerateConsoleCtrlEvent
GetConsoleTitleW
GetDevicePowerState
GetThreadPriorityBoost
BuildCommDCBAndTimeoutsA
HeapReAlloc
WaitCommEvent
GetLogicalDrives
GetFileSizeEx
LocalReAlloc
SetFileShortNameW
GlobalFree
EnumSystemLanguageGroupsA
OpenJobObjectW
FindAtomW
GetPrivateProfileSectionNamesA
FoldStringW
UpdateResourceA
EraseTape
WaitForMultipleObjectsEx
GetShortPathNameA
GetCurrentDirectoryW
GetConsoleAliasesLengthA
IsDBCSLeadByte
GlobalFindAtomA
SetConsoleWindowInfo
DecodePointer
SearchPathW
GetVolumeNameForVolumeMountPointW
OpenWaitableTimerA
SleepEx
SetConsoleCursorPosition
GetDriveTypeW
InterlockedFlushSList
FindActCtxSectionStringA
WaitNamedPipeW
HeapAlloc
SetupComm
EscapeCommFunction
GetLocalTime
ReplaceFileA
GetProfileIntA
ReadConsoleA
OpenEventW
GetPrivateProfileIntW
OpenMutexA
FindFirstVolumeW
GetCalendarInfoA
FillConsoleOutputCharacterW
HeapSetInformation
UnhandledExceptionFilter
lstrcpynW
FoldStringA
GlobalUnlock
GetSystemWow64DirectoryW
SwitchToFiber
EnumSystemCodePagesA
InterlockedIncrement
GetVersion
PeekConsoleInputA
QueryDepthSList
QueryActCtxW
CreateRemoteThread
SetLocaleInfoW
GetVolumePathNamesForVolumeNameA
SetTimerQueueTimer
HeapUnlock
WriteFile
ReadProcessMemory
AddAtomW
ResumeThread
GetFullPathNameA
ReadDirectoryChangesW
EnumCalendarInfoA
FreeEnvironmentStringsA
GetConsoleAliasExesW
CopyFileExA
GetCurrentProcessId
GetFileAttributesA
IsBadHugeWritePtr
FileTimeToSystemTime
EndUpdateResourceW
AttachConsole
RegisterWaitForSingleObjectEx
SetStdHandle
SignalObjectAndWait
SetThreadUILanguage
FlushFileBuffers
SetFileApisToOEM
EnumTimeFormatsA
IsBadWritePtr
GetGeoInfoA
WaitNamedPipeA
AllocConsole
SetCurrentDirectoryW
DeleteFileA
FindNextVolumeMountPointW
OpenThread
FreeResource
SetCalendarInfoA
WritePrivateProfileStringA
FlushViewOfFile
CheckRemoteDebuggerPresent
GetCommMask
SetVolumeLabelW
GlobalFix
SetHandleCount
GetWindowsDirectoryW
GetConsoleAliasA
DebugBreakProcess
GetPrivateProfileStructA
GetComputerNameExA
SetThreadLocale
GetModuleHandleExW
TransmitCommChar
FindFirstChangeNotificationW
GetVersionExW
MoveFileExA
InterlockedExchange
GetModuleHandleW
GetBinaryTypeA
GetFullPathNameW
SetComputerNameExA
RemoveDirectoryA
GetNumberFormatW
CreateTimerQueueTimer
GetEnvironmentStrings
GetCompressedFileSizeA
CreateNamedPipeA
GlobalGetAtomNameW
GetUserDefaultLangID
GetConsoleDisplayMode
GetCommandLineW
DosDateTimeToFileTime
GetCompressedFileSizeW
SetCommTimeouts
FileTimeToDosDateTime
LocalCompact
GetEnvironmentVariableA
IsValidCodePage
SetConsoleTitleA
GetCommModemStatus
LoadResource
WTSGetActiveConsoleSessionId
WriteConsoleW
SetFileTime
DnsHostnameToComputerNameW
CreateJobObjectA
ScrollConsoleScreenBufferA
GetConsoleCursorInfo
OpenFileMappingW
GetFirmwareEnvironmentVariableA
GetVolumeNameForVolumeMountPointA
InterlockedCompareExchange
OpenFile
GetDiskFreeSpaceExA
WriteConsoleOutputAttribute
HeapDestroy
WaitForDebugEvent
ConvertFiberToThread
AddRefActCtx
GetTapeStatus
_lclose
GetCurrentDirectoryA
OpenProcess
GetSystemWindowsDirectoryW
TzSpecificLocalTimeToSystemTime
InterlockedPushEntrySList
WriteTapemark
GetStringTypeExA
HeapWalk
SetMessageWaitingIndicator
EnumResourceTypesW
GlobalMemoryStatusEx
GetProfileIntW
DebugActiveProcess
SetLastError
GetOverlappedResult
GetConsoleOutputCP
FindCloseChangeNotification
GetDefaultCommConfigA
EnumResourceNamesW
SizeofResource
GetWindowsDirectoryA
SetConsoleCursorInfo
SetConsoleDisplayMode
PeekNamedPipe
HeapCompact
WritePrivateProfileSectionW
TerminateProcess
SetEvent
GetDiskFreeSpaceExW
TlsFree
GetHandleInformation
EnumUILanguagesA
SearchPathA
GetModuleHandleA
LoadLibraryA
lstrcmpA
lstrlenA
lstrcmpiA
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
DeleteCriticalSection
GetProcAddress
LoadLibraryW
EnumTimeFormatsW
ExitProcess
GetCommandLineA
GetCurrentProcess
SetUnhandledExceptionFilter
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
CloseHandle
MultiByteToWideChar
ReadFile
GetFileType
RtlUnwind
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
CreateFileA
GetCPInfo
GetACP
crypt32
CryptMsgCountersignEncoded
CertOpenSystemStoreA
CertGetValidUsages
CertFindExtension
CryptMsgDuplicate
CryptSignMessage
CertEnumSubjectInSortedCTL
CryptGetDefaultOIDDllList
CryptUnprotectData
PFXIsPFXBlob
CryptSignMessageWithKey
CertSerializeCertificateStoreElement
CryptUnregisterOIDFunction
CertDeleteCTLFromStore
CertUnregisterSystemStore
CertCreateCertificateChainEngine
CryptSetOIDFunctionValue
CertVerifyRevocation
CryptCreateKeyIdentifierFromCSP
PFXVerifyPassword
CryptVerifyMessageSignatureWithKey
CryptCloseAsyncHandle
CertSerializeCTLStoreElement
CertAddEncodedCertificateToSystemStoreA
CryptSetAsyncParam
CertDeleteCertificateFromStore
CertFindChainInStore
CertFindSubjectInSortedCTL
CertSetCTLContextProperty
CertVerifyCRLTimeValidity
CertCreateCTLContext
CertDuplicateCertificateContext
CryptMemAlloc
CertGetCTLContextProperty
CertFreeCTLContext
CryptFreeOIDFunctionAddress
CertVerifyValidityNesting
CertAddEnhancedKeyUsageIdentifier
CertVerifyTimeValidity
CryptInitOIDFunctionSet
CryptEnumOIDFunction
CryptExportPublicKeyInfoEx
CertRegisterPhysicalStore
CertCloseStore
CertFindCertificateInCRL
CryptBinaryToStringA
CertSaveStore
CryptRegisterDefaultOIDFunction
CryptFormatObject
CertFreeCRLContext
CertVerifyCTLUsage
CryptMsgUpdate
CertEnumCertificatesInStore
CryptEnumKeyIdentifierProperties
CryptFindLocalizedName
iphlpapi
GetAdapterOrderMap
FlushIpNetTable
GetAdapterIndex
GetTcpStatisticsEx
NotifyAddrChange
SetIpForwardEntry
GetUdpStatisticsEx
SetIfEntry
GetIcmpStatisticsEx
UnenableRouter
CreateIpNetEntry
GetTcpStatistics
DisableMediaSense
CreateIpForwardEntry
GetFriendlyIfIndex
NhpAllocateAndGetInterfaceInfoFromStack
DeleteIPAddress
GetIcmpStatistics
SetIpStatistics
GetUdpStatistics
EnableRouter
GetExtendedTcpTable
GetTcpTable
GetIpForwardTable
GetIfTable
GetPerAdapterInfo
GetBestInterfaceEx
SetIpTTL
IpReleaseAddress
NotifyRouteChange
GetIpErrorString
GetBestRoute
msimg32
AlphaBlend
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 193KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ