Static task
static1
Behavioral task
behavioral1
Sample
c52b561a26cccad05d235e02fbee30058bb66822d2c42ba58f79dd0f6f8fd27e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c52b561a26cccad05d235e02fbee30058bb66822d2c42ba58f79dd0f6f8fd27e.exe
Resource
win10v2004-20231215-en
General
-
Target
c52b561a26cccad05d235e02fbee30058bb66822d2c42ba58f79dd0f6f8fd27e
-
Size
657KB
-
MD5
8e3488ccd0a326c28c917cab93771e29
-
SHA1
083529d254e8b576c1c4da02665834ccfdcf3096
-
SHA256
c52b561a26cccad05d235e02fbee30058bb66822d2c42ba58f79dd0f6f8fd27e
-
SHA512
ef3944cf5797b5ab5093231e3fdb1d0e946744f09fb9b1c319d19b12a697ca412d17a24d30f32e265b6d811eb9abd62d6e126bf879c8edb83e62c94abf5112ad
-
SSDEEP
12288:ckIdyOUfFC76LYaSvhNyw7EZrZCtYAPSd:ckIdyOUY7damyKESu8Sd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c52b561a26cccad05d235e02fbee30058bb66822d2c42ba58f79dd0f6f8fd27e
Files
-
c52b561a26cccad05d235e02fbee30058bb66822d2c42ba58f79dd0f6f8fd27e.exe windows:6 windows x86 arch:x86
76ce713399a658f354fdb266f86a1c24
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalGetAtomNameW
SetErrorMode
GlobalFlags
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
GetTickCount64
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
WriteConsoleW
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GlobalHandle
TlsFree
IsValidCodePage
FindFirstFileExW
GetDriveTypeW
GetConsoleOutputCP
MoveFileExW
LCMapStringW
GetTimeZoneInformation
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetFileType
SetStdHandle
GetCommandLineW
GetCommandLineA
RtlUnwind
RaiseException
LocalReAlloc
GetCPInfo
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SuspendThread
SetThreadPriority
GetPrivateProfileStringW
lstrcmpA
GetVersionExW
GetCurrentThread
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
GetCurrentThreadId
EncodePointer
GetFileSizeEx
GetFileAttributesExW
GetThreadLocale
LoadLibraryA
DuplicateHandle
GlobalReAlloc
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
LoadLibraryExW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FileTimeToLocalFileTime
MulDiv
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
GetACP
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetProcessHeap
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
LocalFree
OutputDebugStringW
LocalAlloc
lstrcpynA
CopyFileW
GetPrivateProfileIntW
GetCurrentProcess
ExitProcess
WritePrivateProfileStringW
MoveFileW
Sleep
Module32NextW
GetCurrentDirectoryW
CreateMutexW
GlobalFree
InitializeCriticalSectionEx
FlushFileBuffers
WriteFile
FreeLibrary
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
GetWindowsDirectoryW
FormatMessageW
GetLastError
GetFileTime
GetTempFileNameW
GetTempPathW
ResetEvent
CreateThread
SetEvent
CreateEventW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesW
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
WaitForSingleObject
SizeofResource
TerminateProcess
OpenProcess
Process32NextW
Module32FirstW
Process32FirstW
CreateToolhelp32Snapshot
CloseHandle
CreateFileW
RemoveDirectoryW
DeleteFileW
MultiByteToWideChar
GetModuleHandleW
GetModuleFileNameW
SetFileAttributesW
CreateDirectoryW
FindClose
FindFirstFileW
FindResourceW
LoadResource
LockResource
GetOEMCP
user32
MoveWindow
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
wsprintfW
IsIconic
GetWindowThreadProcessId
SetForegroundWindow
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
GetWindow
CharNextW
GetDlgCtrlID
CopyRect
ReleaseDC
CharUpperW
GetDesktopWindow
GetMenuItemCount
GetMenuItemID
GetSubMenu
OffsetRect
IsWindowEnabled
IsDialogMessageW
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
SetRectEmpty
SendDlgItemMessageA
UnregisterClassW
GetActiveWindow
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
ClientToScreen
GetFocus
PostMessageW
SendMessageW
EnableWindow
GetParent
GetWindowLongW
SetWindowLongW
GetClientRect
PtInRect
GetWindowRect
SetWindowPos
AdjustWindowRect
SystemParametersInfoW
GetDC
LoadBitmapW
InvalidateRect
IsWindow
AdjustWindowRectEx
LoadIconW
SetTimer
GetSystemMetrics
DrawIcon
SetWindowTextW
GetDlgItem
GetCursorPos
InvalidateRgn
CreatePopupMenu
AppendMenuW
KillTimer
PostQuitMessage
LoadMenuW
SetCapture
ReleaseCapture
SetWindowRgn
MessageBoxW
FillRect
SetCursor
IsRectEmpty
LoadCursorW
SetWindowContextHelpId
MapDialogRect
GetMessageW
TranslateMessage
ShowOwnedPopups
DestroyMenu
GetMenuItemInfoW
InflateRect
GetSysColorBrush
IntersectRect
RealChildWindowFromPoint
CopyAcceleratorTableW
PostThreadMessageW
RegisterClipboardFormatW
MessageBeep
GetNextDlgGroupItem
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
SetRect
ShowWindow
gdi32
GetPixel
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SetBkMode
SetMapMode
GetClipBox
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateEllipticRgn
Ellipse
LPtoDP
CreateFontIndirectW
GetTextExtentPoint32W
GetMapMode
GetRgnBox
Escape
CreatePatternBrush
BitBlt
SetTextColor
SetBkColor
GetObjectW
GetTextColor
GetStockObject
GetBkColor
CreateRectRgnIndirect
GetDeviceCaps
DeleteDC
DeleteObject
CreateDIBSection
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateBitmap
CreateSolidBrush
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
RegQueryValueExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
shell32
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
Shell_NotifyIconW
ShellExecuteW
DragQueryFileW
DragFinish
comctl32
InitCommonControlsEx
_TrackMouseEvent
shlwapi
PathStripToRootW
UrlUnescapeW
PathFindFileNameW
PathFindExtensionW
PathIsUNCW
ole32
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromProgID
CoCreateGuid
OleDraw
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CLSIDFromString
CoFreeUnusedLibraries
oleaut32
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayDestroy
SafeArrayCreate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantChangeType
VariantInit
OleCreateFontIndirect
SysAllocStringLen
SysFreeString
VariantClear
SysAllocString
VariantCopy
oledlg
OleUIBusyW
ws2_32
WSAStartup
WSACleanup
inet_addr
gethostbyname
inet_ntoa
htons
socket
connect
send
recv
closesocket
gdiplus
GdipDrawImageRectRectI
GdipSetImageAttributesColorKeys
GdipDisposeImageAttributes
GdipDeleteGraphics
GdipSetSmoothingMode
GdipCreateImageAttributes
GdipDrawImageRect
GdipSetSolidFillColor
GdipDrawImageRectI
GdipLoadImageFromStream
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage
GdipCloneImage
GdipDeleteFont
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCloneBrush
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateSolidFill
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawString
GdipReleaseDC
GdiplusStartup
GdiplusShutdown
GdipDrawImageRectRect
GdipCreateFromHDC
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
iphlpapi
SendARP
wininet
HttpQueryInfoW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetConnectW
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetCloseHandle
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
Sections
.text Size: 463KB - Virtual size: 462KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ