Static task
static1
Behavioral task
behavioral1
Sample
fd86f79bde334055341d698b81b96744.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fd86f79bde334055341d698b81b96744.exe
Resource
win10v2004-20231215-en
General
-
Target
fd86f79bde334055341d698b81b96744
-
Size
476KB
-
MD5
fd86f79bde334055341d698b81b96744
-
SHA1
b7657500bff7d22f4ad4ae12393369e2094d680d
-
SHA256
628bf77cc05d4eba2035f7badf598a63411bd909a7693b46b0bed3798218daf4
-
SHA512
8a4c29c189b675f0a1dac58cd0fa952984f1a983f9a176ffb0a6051621af94c021ec133e1d675c873209f47585b1af054266eb102ecb6940edd18731ba99d5bf
-
SSDEEP
6144:S7PfHNEDOoi0Mjd+Rzqbq8Ml9Z0n3qgK0OrbvUmg8RWYX/A1A8:SbfHRf0MjKV8kZ06BdbvU+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd86f79bde334055341d698b81b96744
Files
-
fd86f79bde334055341d698b81b96744.exe windows:4 windows x86 arch:x86
0140c0f243e437f2d2444a975556a82b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
SetHandleCount
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetEnvironmentStringsW
GetProfileStringA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
GetACP
RaiseException
HeapAlloc
HeapFree
TerminateProcess
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
lstrcpyW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
CopyFileA
GlobalSize
FormatMessageA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
GetCurrentDirectoryA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
SizeofResource
GlobalFlags
GetProfileIntA
SetLastError
MulDiv
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
lstrcpynA
GetTickCount
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GlobalAddAtomA
InterlockedIncrement
GetModuleFileNameA
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcmpA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
Sleep
CreateMutexA
GetLastError
CreateFileA
GetFileSize
VirtualAlloc
ReadFile
CloseHandle
VirtualFree
ExitProcess
LoadLibraryA
IsBadCodePtr
GetProcAddress
user32
LoadStringA
DestroyIcon
CharUpperA
CharNextA
GetNextDlgGroupItem
MessageBeep
GetDCEx
LockWindowUpdate
AppendMenuA
FindWindowA
GetTabbedTextExtentA
DefFrameProcA
BringWindowToTop
ClientToScreen
WindowFromPoint
GetWindowThreadProcessId
GetDesktopWindow
WaitMessage
ReleaseCapture
SetCapture
LoadCursorA
RegisterClipboardFormatA
MapDialogRect
SetWindowContextHelpId
DestroyMenu
LoadMenuA
LoadAcceleratorsA
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetSysColorBrush
SetForegroundWindow
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
SetCursor
UpdateWindow
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
EnableWindow
InflateRect
PostThreadMessageA
GrayStringA
ShowOwnedPopups
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetClassNameA
ClipCursor
IsClipboardFormatAvailable
SendMessageA
MessageBoxA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
CopyAcceleratorTableA
CreateMenu
RemoveMenu
TranslateMDISysAccel
DestroyCursor
GetMenuStringA
DeleteMenu
InsertMenuA
SetParent
WindowFromDC
InSendMessage
SetRect
KillTimer
SetTimer
UnionRect
IsRectEmpty
IsZoomed
PtInRect
GetDC
ReleaseDC
InvalidateRect
UnpackDDElParam
ReuseDDElParam
SetMenu
SetRectEmpty
RedrawWindow
DefMDIChildProcA
DrawMenuBar
GetForegroundWindow
TranslateAcceleratorA
FillRect
gdi32
EndDoc
EndPage
StartPage
DPtoLP
GetDeviceCaps
StartDocA
SetAbortProc
PatBlt
GetStockObject
Rectangle
CreatePen
GetViewportOrgEx
CreateDCA
GetWindowExtEx
GetWindowOrgEx
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
AbortDoc
CreateRectRgn
GetViewportExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetBrushOrgEx
CreateFontIndirectA
GetTextColor
GetBkColor
LPtoDP
GetMapMode
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CopyMetaFileA
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
UnrealizeObject
BitBlt
GetTextMetricsA
GetTextExtentPoint32A
CreateFontA
GetCharWidthA
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchDIBits
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetCurrentPositionEx
CreateDIBitmap
GetTextExtentPointA
CreateBitmap
comdlg32
GetSaveFileNameA
GetFileTitleA
PrintDlgA
CommDlgExtendedError
GetOpenFileNameA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegQueryValueExA
RegCreateKeyA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
shell32
ExtractIconA
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetFileInfoA
comctl32
ord17
oledlg
ord3
ord7
ord5
ord8
ord1
ole32
OleCreate
OleLoad
OleSave
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
ReleaseStgMedium
OleGetIconOfClass
WriteClassStm
OleSaveToStream
CreateStreamOnHGlobal
CreateOleAdviseHolder
CreateDataAdviseHolder
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
RegisterDragDrop
RevokeDragDrop
CoGetClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleDuplicateData
SetConvertStg
WriteFmtUserTypeStg
OleCreateLinkToFile
OleGetClipboard
OleSetMenuDescriptor
OleLockRunning
CoTaskMemAlloc
CoGetMalloc
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoTaskMemFree
OleIsRunning
OleRun
CreateItemMoniker
CoLockObjectExternal
WriteClassStg
GetRunningObjectTable
CreateFileMoniker
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CoDisconnectObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoRegisterClassObject
OleCreateFromFile
OleCreateStaticFromData
OleSetContainedObject
ReadClassStg
StringFromCLSID
ReadFmtUserTypeStg
GetClassFile
CreateBindCtx
CoTreatAsClass
CreateGenericComposite
olepro32
ord253
oleaut32
SysFreeString
SysStringByteLen
SysAllocStringLen
VariantCopy
VariantClear
VariantChangeType
SysAllocString
VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
LoadTypeLi
Sections
.text Size: 320KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ